Ethical Hacker / Penetration Tester

MSU Federal Credit Union; Michigan; Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Health, dental, vision, life, and long

PTO and holidays

Volunteer time off

Remote work within MI/IL

Job summary

MSU Federal Credit Union is seeking a Senior Ethical Hacker to safeguard digital assets through comprehensive security testing, including network and application assessments, phishing simulations, and red team activities. The role reports on findings to executive leadership and the Board to strengthen cybersecurity posture.

Candidates should have offensive security experience, GIAC GPEN/GWAPT designations, and the ability to lead testing programs.

Qualifications

• Bachelor’s degree or equivalent experience in computer science, information technology, or related field.
• Prior experience in penetration testing, vulnerability assessments, or related security testing activities is required.
• GIAC GPEN, GIAC GWAPT, or pursuit of similar designation is preferred.

Responsibilities

• Perform network penetration tests, web application security assessments, mobile application security assessments, wireless network assessments, red team assessments and phishing tests for the Credit Union within scheduled time frames.
• Identify, develop, and document security issues and recommendations with independent judgment.
• Communicate results and recommendations via reports and presentations to leadership and Board of Directors.
• Conduct security assessments of third-party applications utilized by the Credit Union within scheduled time frames.
• Stay updated with the latest cybersecurity trends, tools, and techniques to improve testing methodologies.
• Assist with coordination and performance of all contracted penetration testing projects and services by third parties.
• Evaluate the Credit Union’s risk areas and provide input to the annual penetration testing plan.
• Promote a culture of security awareness through phishing simulations and threat training sessions.
• Understand policies and procedures to ensure compliance and accountability for operational risks.
• Perform other duties as assigned.
• Sr. Ethical Hacker: develop and refine advanced penetration testing techniques and serve as SME.

Skills

Communicate

Navigate Change & Evolve

Solve Problems & Make Decisions

Plan

Prioritize

Achieve

Collaborate

Digital Literacy

Time Management

Critical Thinking

Initiative

Knowledge Sharing

Organization

System Knowledge

Detail Oriented

Resourcefulness

Process Improvement

Education

Bachelor’s degree or equivalent experience in computer science, information technology, or related field

High School Diploma or equivalent

GIAC GPEN

GIAC GWAPT

Job description

This role is essential for safeguarding the Credit Union's digital assets by performing comprehensive security assessments, including network penetration tests, web and mobile application evaluations, and phishing tests. The role identifies and addresses security vulnerabilities, ensuring compliance with industry best practices and internal policies, thereby preventing system compromise and protecting sensitive information. Additionally, the role promotes a culture of security awareness and supports strategic initiatives to enhance the Credit Union's cybersecurity posture, ultimately building trust and confidence among members.

Work Arrangement

This position is a fully remote role within the state of Michigan or Illinois.

Schedule

Monday - Friday 8:30am - 5:00pm ET

An offer of employment with MSU Federal Credit Union and affiliates is contingent upon the agreed work arrangement (onsite/hybrid/remote) and work location. MSU Federal Credit Union may or may not be able to accommodate temporary or permanent changes to work arrangements or allow employment outside the city and/or state of residency in which the new hire resides at the time of offered employment.

• 100% Company-Paid Health, Dental, Vision, Life, and Long-Term Disability Premiums
• Up to 26 days of PTO within your first year, as well as Volunteer Time Off & 11 Paid Holidays
• Perform network penetration tests, web application security assessments, mobile application security assessments, wireless network assessments, red team assessments and phishing tests for the Credit Union within scheduled time frames following industry best practice methodologies.
• Identify, develop, and document security issues and recommendations using independent judgment concerning areas being reviewed.
• Communicate results, suggestions, and/or findings via written reports and oral presentations to Credit Union management, the President/CEO and the Board of Directors.
• Conduct security assessments of third-party applications utilized by the Credit Union within scheduled time frames.
• Stay updated with the latest cybersecurity trends, tools, and techniques to continuously improve testing methodologies and security practices.
• Assist with the coordination and performance of all contracted penetration testing projects and services conducted by third-party vendors.
• Evaluate the Credit Union’s risk areas and provide key input to the development of the annual penetration testing plan.
• Promote a culture of security awareness within the organization through administration of phishing simulation and other best practice and emerging threat training sessions.
• Understand the Credit Union's policies and procedures to ensure compliance and accountability for managing operational risks. Adhere to established internal controls and procedures to safeguard assets, prevent fraud, and maintain the integrity of credit union operations.
• Perform other duties as assigned
• Sr. Ethical Hacker:
  • Develop, implement, and refine advanced penetration testing techniques to identify vulnerabilities in our systems. Apply ethical hacking tools in an innovative and comprehensive manner to increase the Credit Union’s cybersecurity posture.
  • Support the Credit Union strategic direction and initiatives while helping others understand the purpose of decisions and direction.
  • Proactively seek out and identify new areas of potential risk and opportunities for security improvements. This involves conducting thorough assessments of emerging threats and vulnerabilities and recommending strategic initiatives to enhance our security posture.
  • Serve as a recognized subject matter expert across the Credit Union and contribute security and control insights on strategic and innovative projects.

Job Requirements

• Ethical Hacker I:
  • High School Diploma or equivalent required.
  • This position requires a Bachelor’s degree or equivalent experience in computer science, information technology, or related field.
  • Prior experience in penetration testing, vulnerability assessments, or related security testing activities is required.
  • GIAC GPEN, GIAC GWAPT, or pursuit of similar designation is preferred.
• Sr. Ethical Hacker:
  • Prior experience leading a program or independently managing offensive security operations in professional penetration testing and/or vulnerability assessment.
  • GIAC GPEN, GIAC GWAPT, or pursuit of similar designation is required.
• Core Competencies that must be demonstrated by all include Communicate, Navigate Change & Evolve, Solve Problems & Make Decisions, Plan, Prioritize, and Achieve, and Collaborate.
• Digital Literacy - Adopts, effectively uses, and champions new technology. Understands and shares technological information used within the position.
• Time Management - Manages time and resources to ensure that work is completed efficiently.
• Critical Thinking - Takes outside knowledge into account while evaluating information.
• Initiative - Takes proactive and prompt action to accomplish work goals. Takes action to achieve results beyond requirements.
• Knowledge Sharing - Uses formal, informal, and systematic methods to impart information onto others.
• Organization - Arranges work in a systematic way either on small or large scales.
• System Knowledge - Demonstrates knowledge of specific Credit Union programs and applications and successfully navigates these systems.
• Detail Oriented - Ensures information is complete and accurate. Adheres to processes as outlined. Follows up to ensure quality and completion of work.
• Resourcefulness - Creatively copes with difficult situations or unusual problems. Solves problems and achieves results in the face of obstacles and constraints.
• Process Improvement - Spots processes that need improving and can implement those changes.

Physical Demands and Work Environment

• May be required to remain in a stationary position for an extended period.
• Ability to operate standard office technology, equipment, and tools, which may include many hours of computer and phone usage.
• Occasionally needs to move about inside of an office area.
• Exposure to potentially hazardous condition, i.e. robbery. Receives detailed instructions and procedures to be followed to minimize the exposure.
• This position can work in hybrid or remote working arrangements.

Disclaimer

• Please note this job description is not intended to be construed as an exhaustive list of all functions, responsibilities, skills, and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate. This document does not represent a contract of employment, and MSU Federal Credit Union reserves the right to change this position description and/or assign tasks for the employee to perform, as MSUFCU may deem appropriate.
• MSUFCU is an affirmative-action, equal-opportunity employer.
• To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.