Senior Penetration Testing Analyst 1

Sophos

Benefits

Similar Jobs

See all

Role Summary:

  • Act as the point of contact for testing readiness, coordinating tasks, timelines, and communication between business, client, and project teams.
  • Focus on either application security (web, mobile, API) or network security (external/internal penetration tests) using manual testing techniques.
  • Lead client-facing calls from kick-off through close-out, delivering findings and remediation recommendations.

What You Will Do:

  • Coordinate documentation, readiness schedules, and information between stakeholders using project management tools.
  • Conduct exploitation testing with off-the-shelf or self-developed tools and document findings for client remediation.
  • Perform proactive research to identify new threats, vulnerabilities, and exploits.

What You Will Bring:

  • 5+ years in information security with at least 2 years of penetration testing experience.
  • Proficiency with tools like Nmap, Metasploit, Kali Linux, and Burp Suite.
  • Excellent client-facing communication skills and a professional, 'get it done' attitude.

Desirable Qualifications:

  • Offensive certifications such as OSCP, GPEN, or GWAPT.
  • Knowledge of web application authentication, API testing, and common vulnerabilities (OWASP Top 10).
  • Bachelor's degree in a technical field or equivalent experience.

Sophos

Sophos is a cybersecurity company that provides AI-driven threat prevention and managed detection and response services to 600,000 organizations globally. The company has a global team and promotes a remote-first culture with employee-led diversity initiatives and wellness programs.

Apply for This Position