Senior Security Consultant - Penetration Testing

US - Remote


US - Remote



Do you enjoy attacking networks? Do you enjoy hacking custom protocols and embedded devices? As a  penetration tester in the Consulting Division of Rapid7, you will help our clients improve their security  posture through your technical skills and knowledge of defense strategies. 

Our clients often present us with unique security challenges from a testing perspective. Likewise, we work  with a wide variety of technology platforms and protocols. Beyond providing services to customers, you  are encouraged to perform research and speak at security conferences. 

But wait, we're not done yet. You will be working at Rapid7! We have some cool products and ideas and  we're enthusiastic about them. Why wouldn't you want to be part of that? Send us your resume and let's  talk. 

Essential Responsibilities 

You will be called on to perform technical testing against a variety of targets. These include: • Network Penetration Testing (wired and wireless) 

• Web Application Penetration Testing 

• Social Engineering (on premise and electronic) 

Beyond delivering these services, as a consultant you will: 

• Grow and support all security practice offerings in a pre- and post-sales role 

• Develop and maintain positive relationships with clients and understand their business and needs. • Participating in industry conferences and professional organizations 

• Creating additional value for clients through continual insights and consultative advice based on  experience with the client, their industry, established standards and leading practices • Translate technical concepts and convey them to non-security personnel 

 Mentor and coach junior staff to promote growth, project contributions, and knowledge sharing. • Meet professional practice standards and demonstrate exceptional skill in core service areas • Collaborate with sales, pre-sales and marketing personnel to promote and explain penetration testing  services, pricing and scoping and is able to build cross-organizational relationships across Rapid7 

Job Requirements 

• 8+ years in an active technical security role 

• Expert knowledge of the following: 

o Modern penetration testing tools and methods 

o Network security concepts 

o Web-based application security concepts 

o Windows/Linux/UNIX internals 

o Social engineering techniques and tactics 

• Experience using multiple interpreted languages (Ruby, Python, PHP, etc.) 

• Experience with multiple compiled languages (Java, C, C++, Assembly, etc.) 

• Strong written and verbal skills 

• Maintain positive client relationships and feedback 

• Knowledge of common regulatory structures and obligations and common I.T. governance. • The ability to effectively lead teams of penetration testers while on engagements • Be comfortable explaining findings and recommendations to technical and non-technical  audiences including C-Level and Board briefings 

Job Plusses: 

• Previous technical security consulting experience 

• Master's degree or foreign equivalent in Engineering, Computer Science, MIS, CIS or related field • Certifications such as OSCP, OSCE, GXPN, OSEE