Senior Engineer, Penetration Tester

Senior Engineer, Offensive Security: Become the Newest Member of the VF Family

As a member of the Global Cyber Security Assurance team, you will play a critical role in identifying vulnerable systems and processes that could threaten VF, its assets, or personnel. You will recommend remediation steps to key stakeholders to improve VF’s security posture, while also overseeing offensive security engagements and exercises, and maintaining collaboration with various teams across VF.

Key Responsibilities:

• Plan and conduct security exercises that emulate real-world threats to rigorously assess and improve VF’s defenses.
• Collaborate with cross-functional teams, including Blue Team, infrastructure, and application groups to validate detection, response capabilities, and drive security enhancements.
• Develop innovative solutions to complex security challenges, anticipate future threats and designing processes to minimize organizational risk.
• Interpret and communicate technical findings to non-cybersecurity audiences, ensuring recommendations are actionable and adopted.
• Stay informed of emerging threats and vulnerabilities, continually refining penetration testing methodologies and promoting cybersecurity best practices.
• Identify and implement improvements in penetration testing and risk reduction processes, creating efficient workflows and recommending remediation strategies.
• Advise on security best practices organization-wide, including password management, encryption, software updates, and other improvements.
• Provide consultations on information security designs for infrastructure and application projects.
• Build strong collaborative relationships with defensive and infrastructure teams.
• Prepare detailed reports on discovered vulnerabilities and recommend solutions to mitigate risks.
• Champion cybersecurity awareness across the organization, educating and influencing stakeholders through internal channels.

Years of Related Professional Experience: Minimum of 5 years of related experience preferred

Position Requirements:

• Experience in penetration testing methodologies and technologies.
• Ability to identify and exploit identified vulnerabilities responsibly.
• Ability to articulate mitigation strategies for identified vulnerabilities.
• Knowledge of vulnerabilities as presented on the OWASP top 10 web and API vulnerabilities.
• Ability to apply security frameworks (NIST, OWASP, CISA, etc.) to day-to-day operations.
• Understanding of networking protocols (IP, DNS, HTTP, etc.)
• Familiarity with application testing tools such as Burp Suite, Postman, and ZAP.
• Familiarity with network penetration tools such as NMAP, Metasploit, Impacket Suite, and Bloodhound
• Familiarity with API development and deployment best practices.
• Familiarity with common enterprise architectures.
• Basic hands-on experience with at least one of the major cloud providers (GCP, AWS, Azure)
• Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.
• Demonstrated ability to work independently and with others
• Maintains a proper balance between business and operational risk

Educational Preferences:

• A bachelor’s or master’s degree in computer science, information systems or other related field; or equivalent work experience
• Relevant certifications (OSCP, OSWE, eWPT, GWEB, etc.)

Special Physical and/or Mental Requirements: 

• Travel by air and overnight, as required 10% amount of time.

Hiring Range:

$116,000.00 USD - $145,000.00 USD annually

Incentive Potential: This position is eligible for additional compensation awards that may include an annual incentive plan, sales incentive, or commission potential. Specific details of the additional compensation eligibility for this position will be provided during the recruiting and interview process.

Benefits at VF Corporation: You can review a general overview of each benefit program offered, including this year's medical plan rates on www.MyVFbenefits.com  and by clicking Looking to Join VF? Detailed