{"id":51386,"date":"2025-03-15T00:59:41","date_gmt":"2025-03-15T00:59:41","guid":{"rendered":"https:\/\/www.whitehattoolbox.com\/jobs\/penetration-testing-engineer\/"},"modified":"2025-03-15T00:59:41","modified_gmt":"2025-03-15T00:59:41","slug":"penetration-testing-engineer","status":"publish","type":"post","link":"https:\/\/www.whitehattoolbox.com\/jobs\/penetration-testing-engineer\/","title":{"rendered":"Penetration Testing Engineer"},"content":{"rendered":"

Career Category Information Systems<\/span>Job Description<\/b><\/span>Join Amgen\u2019s Mission of Serving Patients<\/span>At Amgen, if you feel like you\u2019re part of something bigger, it\u2019s because you are. Our shared mission\u2014to serve patients living with serious illnesses\u2014drives all that we do.<\/span>Since 1980, we\u2019ve helped pioneer the world of biotech in our fight against the world\u2019s toughest diseases. With our focus on four therapeutic areas \u2013Oncology, Inflammation, General Medicine, and Rare Disease\u2013 we reach millions of patients each year. As a member of the Amgen team, you\u2019ll help make a lasting impact on the lives of patients as we research, manufacture, and deliver innovative medicines to help people live longer, fuller happier lives.<\/span>Our award-winning culture is collaborative, innovative, and science based. If you have a passion for challenges and the opportunities that lay within them, you\u2019ll thrive as part of the Amgen team. Join us and transform the lives of patients while transforming your career.<\/span>What you will do<\/b><\/span>Let\u2019s do this. Let\u2019s change the world. In this vital role you will Guide and support junior team members by offering technical advice, conducting code reviews, and sharing knowledge to promote their professional development.<\/span>\u00b7Perform security testing (e.g., penetration testing, code reviews) and ensure continuous security monitoring across the organization\u2019s IT landscape.<\/span>\u00b7Identify vulnerabilities in networks, systems, applications, and infrastructure through hands-on penetration testing.<\/span>\u00b7Attempt to exploit discovered vulnerabilities to demonstrate their impact and prove their existence (e.g., retrieving sensitive data, elevating user privileges, or gaining access to admin functionality).<\/span>\u00b7Perform assessments on web applications, cloud environments, and network infrastructure.<\/span>\u00b7Use automated tools and manual techniques to identify security weaknesses.<\/span>\u00b7Conduct advanced post-exploitation tasks to simulate real-world attack scenarios.<\/span>\u00b7Work with third-party security vendors for audits, product testing, and external assessments when required.<\/span>\u00b7Use automated tools (e.g., Burp Suite, OWASP ZAP, or Acunetix) to identify common vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and others.<\/span>\u00b7Document identified vulnerabilities in detail, explaining how they were found, their severity, and their potential impact. Include proof-of-concept (PoC) for critical vulnerabilities.<\/span>\u00b7Offer actionable, practical solutions for fixing the vulnerabilities, such as secure coding practices, configuration changes, or security controls.<\/span>\u00b7Use risk-based prioritization, categorizing issues by their severity and business impact (e.g., high, medium, low) to help the organization focus on the most critical issues.<\/span>\u00b7Continuously learn about the latest vulnerabilities, exploits, and security trends.<\/span>\u00b7Present the findings to stakeholders, security teams, and management, explaining the business risk and potential impacts of the vulnerabilities discovered.<\/span>\u00b7Familiarity with industry standards and compliance requirements (e.g., PCI-DSS, NIST, ISO 27001) and their relevance to penetration testing.<\/span>What we expect of you<\/b><\/span>We are all different, yet we all use our unique contributions to serve patients. This role has a strong focus on ensuring the organization’s infrastructure, applications, and systems are secure from external and internal threats. This role is responsible for conducting authorized security tests on IT infrastructure to evaluate the strength of its systems against potential cyberattacks. A variety of automated tools and manual techniques are leveraged to simulate real-world attacks. The penetration tester then works with the organization to prioritize, remediate and report on identified issues, strengthening the overall security posture.<\/span>Basic Qualifications:<\/b><\/p>\n