Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security.
Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Paris, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at Netskope Careers. Please follow us on LinkedIn and Twitter@Netskope.
Netskope Global Information Security organization is looking for a security engineer to be part of the application security assurance team. This position will be responsible for partnering with multiple stakeholders to build, deploy and manage security solutions as part of FedRAMP controls. Also, assessing the Netskope products and cloud services from a holistic security perspective. A strong candidate for this role is someone who can build innovative ways to deploy different security capabilities in an automated manner and can manage them operationally.
- Leading and managing requirements per FedRAMP controls and turning them into operational models and implementations for the InfoSec organization - DAST, SAST, SCA
- Support in performing, triaging and automating SAST, DAST and SCA process
- Deploy and operate security solutions and supporting infrastructure in different environments in support of internal customer security needs and FedRAMP requirements
- Develop and automate day-to-day operational tasks and deployment methods
- Perform security assessment of, but not limited to, web & mobile application, containers, k8s, thick client, cloud environments
- Support and recreate proofs of concept from security reports
- Support and be a member of the PSIRT organization
- 4+ years of penetration testing, application security, penetration testing experience in highly diversified and high growth organizations.
- Proven experience in security engineering, building and managing security solutions across the stack (on-prem and cloud)
- Understanding in application frameworks and how to approach security as well as security pitfalls with them
- Proven experience & track record in web and mobile application penetration testing (Web, Mobile, API/Web Services) - DAST and SAST
- Should have experience with tools Burp suite professional, Metasploit, Tenable, SQL Map and Nmap
- In-depth knowledge of OWASP Web and Mobile Top 10 vulnerabilities, identifying, exploiting and remediating them
- Good knowledge of TCP/IP and other application and network level protocols
- Exposure to cloud service providers like AWS, GCP and other SaaS applications
- Should possess relevant university degree and/or professional qualifications/certification (e.g. CEH, OSCP, CISSP)
- Prior experience working in environments with NIST 800-53, NIST 800-171 controls or FedRAMP requirements
- Excellent written and verbal communication skills.
- Self-motivated, curious, knowledgeable pertaining to news and current events
- Ability to get and maintain a US security clearance
- Bachelor’s degree preferred
#LI-JR1
Compensation:
At Netskope, salary is one component of our competitive total rewards package. The salary range for this position is as listed below. This is a national range. For purposes of complying with applicable laws, the range applies to candidates in California, Colorado, Illinois, Maryland, New York, Washington, and other states.
The successful candidate’s starting pay will also be determined based on job-related skills, experience, qualifications, location, and market conditions.
For all sales roles, the posted salary range is the On Target Earnings (OTE) range for the role, which is the sum of base salary and target commission amount at 100% goal achievement.
In addition to salary, candidates may be eligible for other forms of compensation such as participation in a bonus plan (for non-sales roles) and a stock award program. Candidates may also be eligible for a comprehensive health plan and other benefits that can be reviewed at Netskope Benefits site.
Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.
Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.
The application window for this position is expected to close within 50 days. You may apply by filling out the below information, or visiting our Netskope Careers site.
Similar Jobs
What We Do
Netskope, the SASE leader, safely and quickly connects users directly to the internet, any application, and their infrastructure from any device, on or off the network. With CASB, SWG, and ZTNA built natively in a single platform, the Netskope Security Cloud provides the most granular context, via patented technology, to enable conditional access and user awareness while enforcing zero trust principles across data protection and threat prevention everywhere. Unlike others who force tradeoffs between security and networking, Netskope’s global security private cloud provides full compute capabilities at the edge. Netskope is fast everywhere, data-centric, and cloud-smart, all while enabling good digital citizenship and providing a lower total-cost-of-ownership.
