Cloud Penetration Tester – FedRAMP & AppSec Expert

Fortreum; Leesburg (VA); On-site; USD 125,000 - 155,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K with 4% match

Disability insurance

Life insurance

Training stipends

Certification reimbursements

Home office stipend

Job summary

Fortreum, a cloud security leader, seeks a seasoned Penetration Tester to join our team in the United States. You will perform network, API/web/mobile, and social engineering testing with a FedRAMP and compliance focus, collaborating with Fortune 500 clients.

You will advise on vulnerabilities, deliver final reports on schedule, and mentor junior staff. Travel is limited; certifications and client communication are essential.

Qualifications

• Bachelor’s Degree or 4 years of equivalent job experience.
• 2+ years of professional services experience.
• 3+ years of web application and network penetration testing experience.
• Proficient in at least one scripting language (bash, python, PowerShell, ruby).
• Strong technical acumen with regards to penetration testing methodologies.
• Familiarity with OWASP, MITRE ATT&CK, OSSTMM, and/or PTES.

Responsibilities

• Penetration test customer networks, APIs, web, and mobile apps, and social engineering.
• Advise on vulnerabilities, remediation strategies, and compliance requirements.
• Prepare final deliverables within established timelines.
• Establish and maintain relationships with customers and stakeholders.
• Coordinate project readiness with internal teams and customers.
• Pursue certifications (FedRAMP requirements) as outlined by the team.
• Perform project readouts with customers.
• Train and mentor junior team members.
• Interface with customers and delivery teams across levels.

Skills

Scripting languages

Penetration testing

OWASP

MITRE ATT&CK

Network security

Education

Bachelor's degree or 4 years experience

Tools

eCPPT

OSCP

OSCE

OSWE

GPEN

Job description

Fortreum, a cloud security leader, seeks a seasoned Penetration Tester to join our team in the United States. You will perform network, API/web/mobile, and social engineering testing with a FedRAMP and compliance focus, collaborating with Fortune 500 clients.

You will advise on vulnerabilities, deliver final reports on schedule, and mentor junior staff. Travel is limited; certifications and client communication are essential.