10 days ago
Base Salary
$83k - $135k/yr
Responsibilities
- Conduct manual and automated penetration testing of web applications, APIs, mobile applications, cloud environments, infrastructure, containers, and Kubernetes deployments.
- Perform reconnaissance, vulnerability discovery, exploitation, post-exploitation, proof-of-concept development, and security reporting using established security methodologies.
- Integrate SAST, DAST, SCA, infrastructure-as-code, container security, secrets detection, and API security testing into CI/CD pipelines.
- Collaborate with development, engineering, cloud, and infrastructure teams on vulnerability remediation, secure coding, threat modeling, architecture reviews, and secure design.
- Perform vulnerability triage, risk prioritization, remediation tracking, continuous monitoring support, and security risk assessments.
- Develop security guardrails, policy-as-code capabilities, automation, standards, procedures, and best practices.
- Present security findings and remediation recommendations to technical teams, business stakeholders, customers, and leadership.
Requirements
- Bachelor's degree in Computer Science, Information Security, Engineering, or a related field.
- 5-8 years of hands-on cybersecurity experience, including at least 3 years conducting application and API penetration testing.
- Experience implementing or supporting DevSecOps initiatives in CI/CD environments.
- Strong knowledge of web application security, API security, secure SDLC, OWASP Top 10, OWASP API Top 10, MITRE ATT&CK, threat modeling, and vulnerability management.
- Hands-on experience with Burp Suite Professional, Nmap, Nessus, Qualys or Tenable, Metasploit, Kali Linux, Checkmarx, Veracode, Snyk, SonarQube, GitHub Actions, Azure DevOps, or Jenkins.
- One or more relevant certifications, such as OSCP, CRTO, PNPT, CEH, GWAPT, GPEN, CISSP, CCSP, Azure Security Engineer Associate, or AWS Security Specialty.
- Experience with Docker, Kubernetes, cloud penetration testing, Terraform, or CloudFormation is desired.
- Familiarity with red-team methodologies, adversary simulation, AI/LLM security testing, Zero Trust Architecture, and Secure-by-Design principles is preferred.
- Strong communication, consulting, and stakeholder management skills.
Benefits
- Remote work arrangement based in the United States.
- Base compensation range of $82,950-$135,300, with possible additional variable compensation, bonuses, or commissions.
- Paid time off including vacation, company holidays, personal days, and sick leave, subject to employee grade and policy.
- Medical, dental, and vision coverage; retirement savings plans; life and disability insurance; and employee assistance programs, subject to local policy and eligibility.
- Regular full-time employees receive a comprehensive benefits package.
Tech Stack
Categories
About Capgemini
Capgemini is a global IT services and consulting firm that delivers strategy, cloud, AI, software engineering, and managed services to large enterprises and public-sector clients. Founded in 1967 and headquartered in Paris, it is publicly traded on Euronext Paris and operates in 50+ countries. The group expanded its engineering capabilities by acquiring Altran in 2020, now operating as Capgemini Engineering.