Senior Cyber Penetration Tester & Engineer

PURPOSE :

UNFI is looking for an experienced technical Cybersecurity Penetration Tester and Engineer Senior to help us create a resilient food supply chain. The Cyber Penetration Tester and Engineer Senior will focus on performing threat emulations and identifying cybersecurity issues within the UNFI environment against a wide range of technologies and systems, performing technical penetration testing of APIs, web applications, networks, cloud services, databases, directory services, and infrastructure. They will be part of the cybersecurity threat and emulation team and will collaborate with staff from other teams across UNFI. While management responsibilities are not part of the role, the expectation is that they can lead engagements, communicate technical details to senior leadership, mentor junior staff, provide technical direction to the program. Coding skills and a passion for cybersecurity is a must, with a preference for testers who view cybersecurity and penetration testing as more than just a job but also a hobby.

ESSENTIAL FUNCTIONS :

Job Responsibilities | Percentage

• Perform technical penetration testing of APIs, web applications, networks, cloud services, databases, directory services, and infrastructure. - 75%
• Strategic attack simulation by analyzing UNFI's internal and external attack surface and crafting bespoke penetration strategies. - 10%
• Writing comprehensive reports outlining identified vulnerabilities, potential exploitation paths. Provide remediation guidance and recommendations from the assessments and support any security questions from network, system, and / or application owners. - 10%
• Assess UNFI's software development and cloud infrastructure from a security perspective and help drive internal security standards. - 5%

Total - 100%

JOB REQUIREMENTS :

Education / Certifications / or Equivalent combination of education training and experience :

Experience :

Knowledge / Skills / Abilities :

PHYSICAL ENVIRONMENT / DEMANDS :

The above statements are intended to describe the general nature of the work performed by the employees assigned to this job. All employees must comply with Company policy and applicable laws. The responsibilities, duties and skills required of personnel so classified may vary within each department and / or location.