External candidates: In order for your application to be correctly processed please sign-in before you applyInternal candidates: Please go to Workday and click "Find Jobs" link under CareerThank you for considering opportunities with us!Job Title Penetration Tester - RemoteRequisition Number R7192 Penetration Tester - Remote (Open)Location Arizona - Home TeleworkersAdditional Locations Alabama - Home Teleworkers, Alabama - Home Teleworkers, Arkansas - Home Teleworkers, Colorado - Home Teleworkers, Connecticut - Home Teleworkers, Delaware - Home Teleworker, District of Columbia - Home Teleworkers, Florida - Home Teleworkers, Georgia - Home Teleworkers, Idaho - Home Teleworkers, Illinois - Home Teleworkers, Indiana - Home Teleworkers, Iowa - Home Teleworkers, Kansas - Home Teleworker, Kentucky - Home Teleworkers, Louisiana - Home Teleworkers, Maine Home Teleworkers, Maryland - Home Teleworkers, Massachusetts - Home Teleworkers, Michigan - Home Teleworkers, Minnesota - Home Teleworkers, Mississippi - Home Teleworker, Missouri - Home Teleworker, Montana - Home Teleworkers, Nebraska - Home Teleworkers {+ 18 more}Job InformationCSAA Insurance Group (CSAA IG), a AAA insurer, is one of the top personal lines property and casualty insurance groups in the U.S. Our employees proudly live our core beliefs and fulfill our enduring purpose to help members prevent, prepare for and recover from life's uncertainties, and we're proud of the culture we create together. As we commit to progress over perfection, we recognize that every day is an opportunity to be innovative and adaptable. At CSAA IG, we hire good people for a brighter tomorrow. We are actively hiring for a Penetration Tester! Join us and support CSAA IG in achieving our goals.Your Role: Are you a highly skilled Security professional that has a passion for identifying, assessing, and managing threats, vulnerabilities, and associated risks to enterprise information assets and applications? Bring your proficiency to help us craft and mature our Vulnerability and Offensive Security program. Work closely with our information technology teams to identify and reduce security risks in our IT infrastructure and business applications. You bring to this position a high-level of security expertise and a deep understanding of desktop, server, application and data storage vulnerabilities and how to discover and exploit them in a controlled environment. You'll take the lead and act as a subject matter expert for penetration testing and attack simulation in our data centers, cloud environments and critical business applications, helping us improve our overall threat posture. Help us re-think what it means to be a secure insurance provider in a fast-changing, highly competitive market.Your work:Conduct infrastructure, web application, API, and mobile application penetration testing.Develop, document and administer the entire penetration testing lifecycle during engagements.Conduct breach and attack simulation operations against CSAA systems to identify gaps in prevention, detection, or response.Research, develop, and apply TTPs of relevant threat actors to simulated attack scenarios.Provide subject matter expertise on the remediation of discovered vulnerabilities and gaps in security response.Leverage threat intelligence to hunt for indicators of compromise and vulnerabilities.Develop, deploy, manage and improve breach and attack simulation tools and related processes.Design, develop and manage red and blue team exercises and processes contributing to purple team evaluation and response.Provide team guidance and mentoring as a subject matter expert in purple team activities.Required Experience, Education and SkillsBachelor’s degree (in Information Technology or a related discipline) or equivalent experience6 or more years of Information Technology and Security experience5 or more years of hands-on penetration testing related experience related to infrastructure and web applications.2 or more years hands-on experience with breach and attack simulation toolsProficient knowledge of web development, including but not limited to Ruby, advanced JavaScript libraries (React, Angular, Knockout), Node.JS, JQuery, Object-Oriented Design, Web Services (REST/SOAP)Professional experience with any of the following: Java, .NET, AWS, Functional programming, SQL, MongoD