Security Engineer, Intruder
£50-70k
Offers Share options
More information about location
Cloud-based vulnerability scanner
Open for applications
Cloud-based vulnerability scanner
21-100 employees
Open for applications
£50-70k
Offers Share options
More information about location
21-100 employees
Company mission
To find cyber security weaknesses before the hackers do.
Role
Who you are
- At least 2 years' industry experience in offensive security including knowledge and experience in some or all of the following:
- Network penetration testing and a thorough understanding of network protocols
- Web application penetration testing and a thorough understanding of application layer vulnerabilities
- Developing, extending, or modifying detection and fingerprinting code
- Developing, extending, or modifying exploits, shellcode or exploit tools
- Automation of simple tasks and complex chains using Python, Ruby, or Golang
- Interacting with Cloud services and assessing them for weaknesses
- One or more industry qualifications, for example:
- Offensive Security Certifications such as OSCP, OSWE, OSEP, OSED
- CREST Certifications such as CCT APP, CCT INF, CRT
- Comfortability with client-facing calls in a consultancy setting
- Excellent technical writeup skills
What the job involves
- We are looking for a Security Engineer to write new vulnerability checks for the latest critical vulnerabilities, research breaking vulnerabilities, and discover new weaknesses in well-known products
- Writing and maintaining vulnerability checks with Nuclei, OpenVAS and ZAP
- Providing industry leading insights into breaking vulnerabilities on Intruder Intel
- Monitoring customer targets for emerging critical weaknesses: Rapid Response
- Researching breaking vulnerabilities and reverse engineering well-known products to produce quality active vulnerability checks
- Delivering research findings as technical web content or talks at conferences
- Providing technical assistance on client calls, and assist at occasional events
Application process
- 1. Company intro (30 minutes, remote): initial chat with People/Recruitment for you to learn more about the role and tell us what you're looking for
- 2. Security Intro (45 minutes, remote): introductory call to discuss your experience with a member of the Security team
- 3. Technical Task: a mini project to complete in your own time, before the final interview
- 4. Final Interview: (1 hour 30 minutes): final technical interview questions, and discussion of your technical task
Our take
Intruder is a proactive security monitoring platform for internet-facing systems. It aims to help organisations reduce their cyber attack exposure by providing effortless cyber security.
Intruder was founded in 2015 to help solve the information overload crisis in vulnerability management. Having worked both as an ethical hacker for tier one companies, and for blue teams defending critical national infrastructure, Founder Chris Wallis noticed that while vulnerability management tools were great at finding issues, they were less useful when it came to prioritising them, tracking them, and timely alerting when problems arose. Quite simply - the most important issues were often getting lost in the noise. Intruder aims to help divide the needles from the haystack, focusing on what matters, while ignoring the rest. Effective cyber security is about getting the basics right - Intruder helps clients do that, saving time on the easy stuff, so they can focus on the rest.
Intruder believes that cyber threats are ever-changing and require dedicated oversight while existing services are overly complex to configure and operate. The jargon produced is often confusing, requiring specialist interpretation. Intruder aspires to provide a simple cloud-based security solution which continually scans clients' digital assets, highlighting vulnerabilities and outlining remediation advice in the simplest terms.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 3 rounds)
Oct 2020
$0.8m
SEED
Dec 2018
$0.4m
SEED
Total funding: $1.3m
Company benefits
- Share options so you can benefit from our success
- 28 days paid holiday plus bank holidays, and an additional 5 unpaid if you wish to take them
- Flexible working - you can work from home, but you should be in a position to work from our Shoreditch office 1-2 times a week if you're London-based
- Regular (optional) socials to have some fun. In the past we've explored virtual worlds, played laser tag in VR, and had way too much fun at the cabaret
Company HQ
London, UK
Leadership
Chris Wallis
(Co-Founder)Over a decade experience in cyber security. Worked for big four consulting and international finance organisations. Has advised numerous FTSE 100 companies on cyber security.
Patrick Craston
(CTO & Co-Founder)PhD. Computer Science specialising in artificial neural networks. Expert domain knowledge from six years experience working at one of the UK’s leading cyber security agencies.
Share this job