Costco Wholesale Corporation is seeking a Penetration Test Engineer for its Issaquah, Washington office.

Job Duties: Provide consultative services, working with internal business team members to conduct service engagements for security testing. Review system architecture documentation; create scopes of work for engagement; conduct security testing engagements on scoped assets, systems, processes, and/or employees. Test and resolve problems, perform root cause analysis, identify gaps, recommend solutions and preventative measures, and lead team members to solution delivery plans. Run proof of concepts and use diagnostic/debugging skills to solve current challenges in multi-platform systems. Work with stakeholders to provide security engagements to test their systems and business requirements. Document security findings from penetration testing engagements and report the risks of those findings to the business owner and management. Find vulnerabilities in various spaces, such as web applications, native applications, database systems, authentication flows, distributed systems and designs, and protocols. Telecommuting permitted.

Minimum requirements: Bachelor's or foreign equivalent degree in Computer Science, Engineering Management, or a related field. Plus two years of experience in: External and internal network security testing, including using industry-standard tools to identify vulnerabilities in infrastructure, and leveraging publicly-disclosed exploitation techniques to compromise systems; Web application security testing using frameworks, such as OWASP 10, and tools, such as Burp Suite, to launch attacks on web applications; and Cloud infrastructure security testing across AWS, GCP, and Azure environments, with an understanding of identity and access management, data storage and security, network transmission security, and resource deployment mechanisms.

Alternative requirement: Four years of experience in: External and internal network security testing, including using industry-standard tools to identify vulnerabilities in infrastructure, and leveraging publicly-disclosed exploitation techniques to compromise systems; Web application security testing using frameworks, such as OWASP 10, and tools, such as Burp Suite, to launch attacks on web applications; and Cloud infrastructure security testing across AWS, GCP, and Azure environments, with an understanding of identity and access management, data storage and security, network transmission security, and resource deployment mechanisms.

Salary range: $200,000 - $225,000. Benefits: paid time off, medical/dental/vision/hearing aid/pharmacy/behavioral health/employee assistance, health care reimbursement & dependent care assistance plans, short/long-term disability, AD&D, life insurance, 401(k), stock purchase plan.

Job Order number must be indicated on your response.

Please send resume to:

Claudia Aguilera, JOB # 9194

Costco Wholesale Corporation

999 Lake Drive

Issaquah, WA 98027

or it-recruiting@costco.com