Startup Jobs
Post a Job
Netskope

Red Team Engineer - FedRAMP

St. Louis , United States

AI overview

Be part of a team that manages security solutions for FedRAMP controls, focusing on innovative automation and holistic security assessments across various platforms.

About Netskope

Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security. 

Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Paris, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive.  Visit us at Netskope Careers. Please follow us on LinkedIn and Twitter@Netskope.

About the position:

Netskope Global Information Security organization is looking for a security engineer to be part of the application security assurance team. This position will be responsible for partnering with multiple stakeholders to build, deploy and manage security solutions as part of FedRAMP controls. Also, assessing the Netskope products and cloud services from a holistic security perspective. A strong candidate for this role is someone who can build innovative ways to deploy different security capabilities in an automated manner and can manage them operationally.

Responsibilities:

  • Leading and managing requirements per FedRAMP controls and turning them into operational models and implementations for the InfoSec organization - DAST, SAST, SCA
  • Support in performing, triaging and automating SAST, DAST and SCA process
  • Deploy and operate security solutions and supporting infrastructure in different environments in support of internal customer security needs and FedRAMP requirements
  • Develop and automate day-to-day operational tasks and deployment methods
  • Perform security assessment of, but not limited to, web & mobile application, containers, k8s, thick client, cloud environments
  • Support and recreate proofs of concept from security reports
  • Support and be a member of the PSIRT organization

Requirements:

  • 4+ years of penetration testing, application security, penetration testing experience in highly diversified and high growth organizations.
  • Proven experience in security engineering, building and managing security solutions across the stack (on-prem and cloud) 
  • Understanding in application frameworks and how to approach security as well as security pitfalls with them
  • Proven experience & track record in web and mobile application penetration testing (Web, Mobile, API/Web Services) - DAST and SAST
  • Should have experience with tools Burp suite professional, Metasploit, Tenable, SQL Map and Nmap
  • In-depth knowledge of OWASP Web and Mobile Top 10 vulnerabilities, identifying, exploiting and remediating them
  • Good knowledge of TCP/IP and other application and network level protocols
  • Exposure to cloud service providers like AWS, GCP and other SaaS applications
  • Should possess relevant university degree and/or professional qualifications/certification (e.g. CEH, OSCP, CISSP)
  • Prior experience working in environments with NIST 800-53, NIST 800-171 controls or FedRAMP requirements
  • Excellent written and verbal communication skills.
  • Self-motivated, curious, knowledgeable pertaining to news and current events
  • Ability to get and maintain a US security clearance

Education:

  • Bachelor’s degree preferred 

#LI-JR1 

Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.

Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.

Netskope

Netskope, a global cybersecurity leader, is redefining cloud, data, and network security to help organizations apply zero trust principles to protect data.

Website LinkedIn
View all jobs
Get hired quicker

Be the first to apply. Receive an email whenever similar jobs are posted.

Ace your job interview

Understand the required skills and qualifications, anticipate the questions you may be asked, and study well-prepared answers using our sample responses.

Engineer Q&A's
Report this job
Apply for this job