Associate 1, Offensive Security

We are the leading provider of professional services to the middle market globally our purpose is to instill confidence in a world of change empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled inclusive culture and talent experience and our ability to be compelling to our clients. Youll find an environment that inspires and empowers you to thrive both personally and professionally. Theres no one like you and thats why theres nowhere like RSM.

Responsibilities:

• Perform security assessments including static and dynamic application security testing
• Conduct manual penetration testing on web applications network devices and other systems
• Collaborate with our clients in a fast-paced environment across many technology stacks and services including cloud platforms and development technologies
• Develop enhance and interpret security standards and guidance
• Demonstrate and promote security best practices including secure development and cloud security
• Assist with the development of remediation recommendations for identified findings
• Identify and clearly articulate (written and verbal) findings to senior management and clients
• Help identify improvement opportunities for assigned clients
• Stay up-to-date with the latest security trends technologies and best practices
• Work effectively within a team fostering collaboration and open communication to deliver successful outcomes
• Supervise and provide engagement management for other staff working on assigned engagements

Required Qualifications:

• BS in Computer Science Engineering or related field or equivalent work experience
• Expert in web security possessing extensive knowledge of vulnerabilities along with the ability to identify and exploit them effectively.
• 3 years of experience in code review application security testing or web application development
• Excellent written and verbal communication skills
• Strong scripting skills (e.g. Python Ruby Perl)
• Experience with cloud platforms such as AWS and knowledge of cloud security best practices
• Familiarity with development technologies like Docker CDK Terraform Java Python React GraphQL Javascript JSON REST etc.
• Must possess a high degree of integrity and confidentiality as well as the ability to adhere to both company policies and best practices
• Technical background in application development networking/system administration security testing or related fields
• Experience with both static application security testing (SAST) and dynamic application security testing (DAST) using various tools and techniques

Preferred Qualifications:

• Preferred but not required - one or more relevant certifications such as Offensive Security Web Assessor (OSWA) Offensive Security Web Expert (OSWE) Offensive Security Certified Professional (OSCP) Burp Suite Certified Practitioner or AWS Certified Security Specialist.

* Note:- Rotational shift

At RSM we offer a competitive benefits and compensation package for all our offer flexibility in your schedule empowering you to balance lifes demands while also maintaining your ability to serve more about our total rewards at

RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past current or prospective service in the Indian Armed Forces; Indian Armed Forces Veterans and Indian Armed Forces Personnel status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/ is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application interview or otherwise participate in the recruiting process please send us an email at .