security Engineer IiDeltek Systems

Company Summary
Better software means better projects. Deltek is the leading global provider of enterprise software and information solutions for project-based businesses. More than 30,000 organizations and millions of users in over 80 countries around the world rely on Deltek for superior levels of project intelligence, management and collaboration. Our industry-focused expertise powers project success by helping firms achieve performance that maximizes productivity and revenue. www.deltek.com
Position Responsibilities
Deltek is looking for a Senior Offensive Security Engineer, with extensive background in Offensive Security Operations, to join our Offensive Security team. The Senior Offensive Security Engineer will be performing full scale end to end security engagements, which include internal networks, external networks, web applications, mobile applications, APIs, Cloud and other Deltek environments. This role plays a key role in managing security risk across Deltek and protecting our customers. The successful candidate will be versed in employing dynamic security assessment tools coupled with manual assessment techniques to identify security vulnerabilities across applications and internal environments in order to determine their exploitability. You will be responsible for working closely with various Deltek engineering teams, while testing their environments. You will be providing deep security expertise and insight into correctly identify and explain the security risks and vulnerabilities while working with engineering teams on remediation strategies.
This position is hands-on and requires curiosity and tenacity to deeply analyze and identify issues across applications and environments avoiding a checklist approach to application security. Deltek's broad application portfolio will challenge you with its variety of applications, technologies and environments and you'll play a key role in strengthening Deltek. As a member of Deltek's Offensive Security Team, this role will report to the US-based Senior Manager, Offensive Security team.
Things You Will Do:
Design, scope, and perform offensive security engagements from planning, scoping, execution to reporting
Perform application penetration tests against Web, Mobile, API, Thick Client applications to identify software security vulnerabilities in Deltek products and internal enterprise applications
Perform vulnerability assessments, penetration tests and adversarial operations to evaluate Deltek's Cybersecurity maturity and resiliency against attacks
Work with external third parties and researchers to reproduce, score, and further investigate reported issues
Assess Deltek's Cloud environments for security risks, misconfigurations as well as new service provisioning with the Cloud Team to establish security baselines and drive security assessment findings into automated security configuration of cloud services
Thoroughly validate, document findings/Proof of Concepts and concisely communicate with different stakeholders (e.g. Application Engineers, Management, etc)
Maintain, develop, automate and continually integrate new attack tactics and tools; monitor and search for new threat tactics and vectors, integrating them into your attack toolkit
Qualifications
Bachelor's Degree in Computer Science/Information Technology, Cybersecurity or equivalent work experience
At least 7 years of security engineering experience, including red teaming, penetration testing, threat and vulnerability assessments
Strong experience with different application technologies and frameworks (e.g. Java, .Net, C#)
Strong experience in Web, Mobile, Thick Client and API application penetration tests
Excellent communication and data presentation skills to clearly and effectively communicate information to stakeholders, both internally and externally
Programming experience in Python, C/C++, JavaScript, .NET or other interpreted or compiled languages
Ability to collaborate with application developers to understand application surfaces
One or more hands-on practical Offensive Cybersecurity certifications or trainings (e. g. OSCP, OSWE, eCPPT, eCPTX, eWPT, WAPTX, GIAC Certs, Pentester Academy Red Team Expert, Pentester Academy Certified Red Team Professional, etc)
Certified Ethical Hacker (CEH) Certificate will not be considered
Knowledge of Cloud security principles
Strong Network and Application security concepts
Prior experience conducting adversarial emulations
Deltek Systems

Makati City, Metro Manila
Permanent
Full-time