ABOUT TECHNOLOGY @ OPORTUN
The Technology team @ Oportun is dedicated to delivering and maintaining performant, elegant, and intuitive systems to our business partners and retail customers. We work on a very unique platform, combining service-oriented platform services with sophisticated user experiences, all enabled through a best-in-class (and fun to use!) automated development infrastructure. We prove that FinTech is more fun, more challenging, and in our case, more rewarding as we build technology that changes our customers’ lives. Oportun serves customers in English and Spanish, online and over the phone in 29 states, and in-person at more than 330 retail locations in 9 of those states.
With the launch of the OPRT Development Center in India in December 2019, Oportun embraced a global approach to innovation. Our technology development center plays a critical role in developing and improving Oportun technology, analytics, and systems including technology for financial products, enhancing our customer experience and supporting our mobile servicing platform. In India, the ODC is an essential building block of Oportun’s technology-driven business which we aim to grow into the hub of technology and innovation for Oportun, furthering our mission-based, technology-powered approach to providing inclusive, affordable, and empowering financial services.
ODC is a Remote-First Organization and we allow our talents to work remotely anywhere in India. Our office location is Chennai, however we hire best talents across India.
Senior Security Engineer-Offensive Security is a member of the Security Engineering team within Oportun’s Information Security team focused on running offensive security program in Oportun. This team emulates real world adversary activities in order to better our enterprise and product security. This team requires thinking like an attacker while understanding the various levels of defensive technologies and their effectiveness. Creativity is key. Our Red Team develops in depth attack plans that focus on compromising Oportun, test existing defenses or assist in building new defenses based on real world attack data.
As a Senior Security Engineer, you will
Plan and execute offensive security engagements through penetration testing, red team operations, social engineering, physical security assessments, web application assessments
Perform offensive cyber security engagements simulating adversaries during red team operations leveraging adversarial Techniques, Tactics and Procedures (TTPs)
Manually assess the security posture of our Extension, Web and Mobile clients
Evaluate and leverage automated tools that perform security assessments
Evaluate the security posture of third-party integrations and partnerships
Translate red team engagement findings into actionable items for both technical and executive audiences
Create POC’s for vulnerabilities found in Oportun
Create scripts, tools, or methodologies to enhance Oportun’s offensive security capabilities
Create technically flexible remediation strategies for vulnerabilities
Work with the security development team and application security to improve and automate application security assessments
Research previously unknown vulnerabilities in Oportun’s infrastructure
Lead threat modelling and tabletop exercises
Evaluate and contribute to Oportun’s overall security strategy
3+ years of Red Team experience simulating adversaries
5+ years hands on experience with penetration testing
Experience with penetration testing networks, wireless networks, and web applications
Experience with physical security assessments, and social engineering
5+ years hands on experience with Metasploit AND Kali Linux
Strong understanding of the MITRE ATT&K framework
Strong understanding of system and application vulnerability classes
Well-rounded knowledge in security tools, software and processes
Knowledge in identity access, access control, network/host intrusion detection, intrusion prevention and patch management tools
Knowledge of Cloud, Containers and Container Orchestration tools
Knowledge of programming or scripting languages, such as C#/.NET, C++, Python, PowerShell, Bash
Knowledge of regulatory security frameworks
Ability to write clearly and concisely for both technical and executive audiences
Bachelor’s Degree (preferred)
Industry certifications like OSCP, OSCE, GXPN, GPEN, GWAPT, AWS, are highly desired for this role
#LI-Remote
#IND
ABOUT OPORTUN
Oportun (Nasdaq: OPRT) is an A.I.-powered digital banking platform that seeks to make financial health effortless for anyone. Driven by a mission to provide inclusive and affordable financial services, Oportun helps its nearly 1.5 million hardworking members meet their daily borrowing, savings, banking, and investing needs. Since inception, Oportun has provided more than $12 billion in responsible and affordable credit, saved its members more than $2 billion in interest and fees, and automatically helped members set aside more than $7.2 billion for rainy days and other needs. In recognition of its responsibly designed products, Oportun has been certified as a Community Development Financial Institution (CDFI) since 2009.
With headquarters in California and a remote-first corporate culture, our 3,000+ team members work in Oportun locations and remotely throughout the United States, Mexico, and India. Our global operations include our Mexico contact centers and administrative offices, our India technology development center, and our US corporate, technology, and retail operations.
We are proud to have been named a “Top Workplace” by the Bay Area News Group for three consecutive years, one of Fast Company’s Most Innovative Companies in the World for 2020 and recognized as one of TIME Magazine’s 2018 Genius Companies Reinventing the Future.
WORKING AT OPORTUN
Working at Oportun means enjoying a differentiated experience of being part of a team that fosters a diverse, equitable and inclusive culture where we all feel a sense of belonging and are encouraged to share our perspectives. This inclusive culture is directly connected to our organization’s performance and ability to fulfill our mission of delivering affordable credit to those left out of the financial mainstream. We celebrate and nurture our inclusive culture through our employee resource groups and our Diversity, Equity, Inclusion and Belonging Council.
Remote-First Company
As a “remote-first” workplace, our team members live, work and collaborate from their homes, remote work locations and our offices and contact centers in the United States, Mexico, and India. No matter our location, we are dedicated to our mission to provide inclusive, affordable financial services that empower our customers to build a better future.
Req No.: 2022-12487
Remote / WFH: Yes
External Company Name: Oportun Inc
External Company URL: http://www.oportun.com
Street: 10th Floor, CITIUS A Block, Phase 1