Associate Red Team Engineer

Veeva Systems is a mission-driven organization and pioneer in industry cloud, helping life sciences companies bring therapies to patients faster. As one of the fastest-growing SaaS companies in history, we surpassed $2B in revenue in our last fiscal year with extensive growth potential ahead.
At the heart of Veeva are our values: Do the Right Thing, Customer Success, Employee Success, and Speed. We're not just any public company – we made history in 2021 by becoming a public benefit corporation (PBC), legally bound to balancing the interests of customers, employees, society, and investors.
As a Work Anywhere company, we support your flexibility to work from home or in the office, so you can thrive in your ideal environment.
Join us in transforming the life sciences industry, committed to making a positive impact on its customers, employees, and communities.
The Role
Veeva’s Offensive Security Team is seeking an Associate Red Team engineer to help ensure the Veeva product teams are developing secure solutions by detecting vulnerabilities early in the life cycle. This role has a broad scope, ranging from testing/validating Veeva’s AWS services, infrastructure, processes, and products. Discovering weaknesses in Veeva’s architecture, working with product and platform teams, and performing penetration tests on new products are just part of the job. You’ll also be working with third party testers and researchers to sharpen our detective and preventative capabilities.

What You'll Do

• An Associate Red Team Security Engineer at Veeva is expected to be strong in offensive security domains, testing, techniques, and practices. Engineers in this role work closely with application product teams throughout Veeva. Security engineers will provide technical leadership and advice to developers, engineers, and third-party consultants
• As an Associate Red Team Engineer, you must show exemplary judgment in making informed technical trade-offs of testing, short-term fixes, long-term security gains, and product team development. Above all else, a strong sense of customer advocacy is necessary to focus on the ultimate goal of keeping Veeva and its customers secure
• Penetration tests of new products, features, and technologies
• Test web applications, mobile applications, and desktop applications
• Conduct full cycle engagements with development teams independently, or as part of a team
• Assist with automation efforts on the team
• Thoroughly document exploits, attack chain, proof of concept scenarios for technical reviews
• Communicate findings and discoveries to prioritize and execute remediation plans
• Coordinate findings and remediation from third party penetration testers
• Maintain …