https://www.linkedin.com/jobs/view/2503533600/?alternateChannel=search&refId=4iQvj6XNgnUVEnKfxDajww%3D%3D&trackingId=jCXcww2jq5FcVkqDfxvItw%3D%3D

Associate Offensive Security Engineer, Managed Services

Red Hat

Czechia, Europe

About the job: The Product Security team is looking for an AssociateOffensive Security Engineer focused on managed services to join us inBrno, Czech Republic. In this role, you will help us achieve our missionto advance the open source security landscape by collaborating withcommunities of customers, contributors, and partners to protect againstprivacy and security risks. Youll work closely with the productengineering team and the open source community to find vulnerabilitiesin our hosted and service offerings, question the security assumptionsof our offerings, and demonstrate real attacks. As an AssociateOffensive Security Engineer, you will collaborate with securityengineers to verify threat models and to address identifiedvulnerabilities. Your work will be essential to the success and growthof our solutions portfolio by ensuring consistent security standards andverification of the same through scanning, penetration testing, and codeauditing. Primary Job Responsibilities: Carry out offensive testing of hosted offerings, including pen testing and red teaming, using existing and custom-made tooling; deliver detailed and actionable reports following issues through to remediation Conduct methodical and well-structured source code analyses producing solid artifacts, demonstrating coverage, and developing uncovered vulnerabilities into real attacks against real environments Design and implement tooling and frameworks for automated testing and vulnerability discovery; plan and schedule automated testing activities and reviews Be actively engaged in upstream open source software communities to guide good security practices and identify issues early in the pipelineRequired Skills Good understanding of software vulnerabilities and exploitation; focus on the Open Web Application Security Project (OWASP) Top 10 Knowledge of using and understanding various offensive security tools Basic understanding of multiple as-a-service cloud technology paradigms, including Infrastructure-as-a-Service (IaaS), Software-as-a-Service (Saas), and Platform-as-a-Service (PaaS) Good understanding of operating system internals and user tool chains, preferably Red Hat Enterprise Linux (RHEL) Knowledge of at least one programming language Excellent written and verbal communication skills in English