Penetration Testing Engineer II

Position Summary...

What you'll do...

Position: Penetration Engineer II

Duties: Manage a program assessment (scoping) from initial planning, scheduling, communications with systems owners and related stakeholders through to final reporting. Prepare required assessment documentation. Assist in process improvement and automation for the assessment methodology. Conduct assessments of client and contractor hardware, to ensure compliance with security requirements. Analyze and determine compliance with applicable federal and legislative regulations. Partner with other cyber security and development team to identify businesses critical/high-risk assets [Web/mobile application, Servers, Network, Point of Sales machines, Robots]. Perform in-depth security assessment/penetration testing of businesses’ critical and high-risk assets as per OWASP top ten, SANS top twenty-five, HIPPA and PCI DSS standard. Identify and exploit vulnerabilities in commercial, open source, and custom software applications; infrastructure; people; and processes running across one of the world’s largest networks. Compose test reports and record vulnerability data according to Governance, Risk, and Compliance (GRC) processes. Deliver technical debriefs to engineers/developers, which helps them in fixing the identified vulnerability. Evaluate and maintain testing tools, hardware, and equipment, creating new tools where appropriate.

Minimum education and experience required: Master’s degree or the equivalent in Computer Science, Information Technology, Engineering, or related field plus 1 year of experience in information technology or related experience; OR Bachelor's degree or the equivalent in Computer Science, Information Technology, Engineering, or related field plus 2 years of experience in information technology or related experience; OR 4 years of experience in information technology or related experience.

Skills required: Must have experience with: Performing in-depth security assessment/penetration testing of business critical and high-risk assets as per OWASP Top 10; Managing a program assessment (scoping) from initial planning, scheduling, and communications with systems owners and related stakeholders through to final reporting; Delivering technical debriefs to engineers/developers, which helps them in fixing the identified vulnerability; Manual and automated vulnerability assessment of web applications using Burp Suite, PostMan, MicroFocus Fortify, Nikto, Skipfish, SSLScan, DirBuster, Flagfox, Wappalyzer, Live HTTP Header and Tamper Data, Kali Linux; Evaluating and maintaining testing tools, hardware, and equipment, creating new tools where appropriate. Employer will accept any amount of experience with the required skills.
  Wal-Mart is an Equal Opportunity Employer.
At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet. Health benefits include medical, vision and dental coverage. Financial benefits include 401(k), stock purchase and company-paid life insurance. Paid time off benefits include PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting. Other benefits include short-term and long-term disability, company discounts, Military Leave Pay, adoption and surrogacy expense reimbursement, and more. You will also receive PTO and/or PPTO that can be used for vacation, sick leave, holidays, or other purposes. The amount you receive depends on your job classification and length of employment. It will meet or exceed the requirements of paid sick leave laws, where applicable. For information about PTO, see https://one.walmart.com/notices. Live Better U is a Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities. Programs range from high school completion to bachelor's degrees, including English Language Learning and short-form certificates. Tuition, books, and fees are completely paid for by Walmart.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to a specific plan or program terms.
For information about benefits and eligibility, see