At Vonahi Security, work is more than a job - it's a passion: To hack. To tinker. To exploit. To collaborate. To automate. To make an impact. To build the future of automated network penetration testing. Not just to do something better, but to attempt things you've never thought were possible. Are you ready to push the boundaries in this new era of infosec and solve one of the industry's most challenging problems? If so, let's talk.

Why Join?

• We're pushing the boundaries of technology with automation.
• Focus on expanding your knowledge and skills.
• Our company culture is all about teamwork, innovation, and helping each other.

Primary Responsibilities

• Contribute to the backend development of our automated pentesting framework to continuously improve efficiency and introduce new automated exploits.
• Collaborate with the penetration testing team on new tools and strategies for expanding the framework.
• Stay updated with the latest and greatest security vulnerabilities and available exploits to incorporate into the platform.
• Document and streamline development best practices and initiatives.
• Use custom and open-source tools to perform and report on exploitation and post-exploitation attacks that were not covered by our automation efforts.
• Identify bugs and room for improvement relating to the framework and other custom tools for our automation team.
• Contribute to internal documentation of (post-)exploitation attacks that can be performed by our pentesters.
• Collaborate with our automation team by suggesting and documenting attacker vectors not yet covered by the framework.
• Occasionally write scripts in Ruby, Python, and/or Bash to automate manual testing routines and/or specific attacks (e.g., testing for and exploiting default credentials in common web apps).
• Recommend new procedures, policies, and tools to streamline our pentest QA process and eliminate repetitive, manual tasks.

Qualifications

• Must be comfortable performing post-exploitation in Active Directory and enterprise environments with no assistance.
• Must possess and demonstrate experience with object-oriented programming (OOP).
• Experience with MVC frameworks, especially Ruby on Rails, is a huge plus.
• Must possess knowledge in either Ruby or Python.
• Must be able to use Linux without any assistance.
• Must be familiar with standard penetration testing tools (e.g. Nmap, Metasploit, etc.).
• Ability to adapt and learn new creative ways to solve inefficiencies through automation.
• Understanding of networking protocols and terminology.
• Passion for developing new tools and scripts to solve problems.
• Excellent teamwork and collaboration skills.

About Vonahi Security

We're the cybersecurity company that developed vPenTest, a SaaS platform that automates network penetration testing and delivers continuous testing at a fraction of the cost of an outsourced consultant. The future of offensive cybersecurity consulting services through automation starts here. We are headquartered in Atlanta, GA. Visit www.vonahi.io to learn more.

At Vonahi Security, we work with organizations of all sizes to deliver real business value by:

• Validating security vulnerabilities with the industry's golden standard: network penetration testing.
• Making offensive security more affordable with automation
• Offering internal and external network penetration testing on a continuous basis without all the headaches, just a few clicks.

We are a minority-owned U.S. company. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, or veteran status. We believe that everyone deserves to be supported and encouraged to be unique individuals. We embrace different ideas and perspectives. Our company was built with passion, creativity, and a diverse team from all around the world and we take great pride in creating a culture and work environment that is welcoming and inclusive for all, driven by behavior that shows empathy, respect, and care for others. Any form of disrespect or harassment will never be welcomed or tolerated here.