5thColumn is looking to add a Senior Network Security Engineer to their engineering team. The ideal candidate will have a great attitude, be able to work independently, and take ownership of all tasks from start to end. This person must have strong organizational skills with the ability to direct and manage multiple projects and priorities depending on organizational needs and strategies. They should also have excellent executive facing communication skills coupled with a strong track record of driving value for a business, as well as the ability to communicate technical information to both technical and non-technical audiences.

Responsibilities:

• Perform security assessments and risk analysis, attack simulation, application-level automated & manual penetration testing and/or develop proof-of-concept exploits
  
• Author detailed and articulate penetration test reports, including prescriptive recommendations for remediation options.
  
• Conduct white box and block box penetration testing of production and corporate environments
  
• Conducts onsite and remote social engineering testing including persuasion, phishing, and targeted recon activities
  
• Perform technical assessments of production environments for regulatory reporting, risk baselines, or other industry related requirements / best practices
  
• Monitor industry developments and trends that affect specific verticals through trade and other publications, seminars, conferences, and data harvesting
  

• Systems security with familiarity of information security
  
• Strong knowledge of desktop, server, application, and network security principles for conducting comprehensive threat analysis and risk identification / enumeration
  
• Well versed in social engineering techniques and defenses
  
• Strong knowledge of security engineering concepts and frameworks (OWASP), PKI, NIDS, HIDS, system hardening principles and investigative methods (NIST / SIFT)
  
• Experience in building and breaking security controls across a wide variety of technologies and environments
  
• Understanding of networking and Internet security concepts and protocols; familiar with database security, TCP/IP, HTTP and SSL, public key infrastructure, fraud prevention practices (firewalls, intrusion detection systems, data leakage prevention)
  
• Strong technical knowledge and background including information management concepts and practices
  
• Strong project management skills
  
• Ability to develop, communicate and implement plans that support the overall goals of the organization
  
• Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH) or other security certification preferred