Penetration Tester

Akaasa Technologies; Falls Church (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Akaasa Technologies seeks a seasoned Penetration Tester to conduct comprehensive testing of web apps, APIs, and networks. You will perform red team engagements, apply Burp Suite Pro and Kali Linux tools, and document findings with clear remediation guidance.

Candidates should have 8+ years of experience, a relevant degree, and certifications (OSCP, GIAC, GPEN, GWAPT, GCPN). You will collaborate with CSOC to strengthen security controls and defenses.

Qualifications

• 8+ years of relevant experience.
• A degree from an accredited college/university in the applicable field of services is required.
• Certifications: Penetration testing, OSCP, GIAC, GPEN, GWAPT or GCPN.
• Highly skilled in web application testing, API testing, and network testing.
• Prior experience with Burp Suite Professional or other similar DAST tools.
• Experience with AI and penetration testing AI.
• Experience with Kali Linux and tools for penetration testing.
• Experience with Metasploit Pro and Cobalt Strike for red team operations.
• Experience with Red Team engagements from planning to execution.
• Experience with phishing network users for lateral movement.
• Experience with Purple Team engagements to test monitoring controls.

Responsibilities

• Conduct penetration testing of web applications, APIs and networks.
• Lead and participate in red team engagements from planning through execution.
• Document vulnerabilities and remediation steps with technical writing.
• Utilize Burp Suite Pro and other DAST tools to identify and validate issues.
• Coordinate with CSOC and engineering teams to improve monitoring and defenses.

Skills

Penetration testing

Web application testing

Api testing

Python

PowerShell

Scripting

Technical writing

ASVS

MITRE ATT&CK

Education

Bachelor's degree in a relevant field

Tools

Burp Suite Professional

Metasploit Pro

Cobalt Strike

Kali Linux

Job description

TITLE: Penetration Tester
WORK LOCATION: Falls Church, VA (Remote) Local only

CLEARANCE: Candidates should have at least a Public Trust Clearance (Active or Inactive)

SKILLS

penetration testing, web application testing, Api testing, burp suite professional or other DAST tools, ai, kali linux, metasploit professional, cobalt strike, red and purple team engagements, python, powershell, scripting, pci-dss, technical writing skills, owasp application security verification standards (ASVS), mitre att&ck

JOB DESCRIPTION:

• 8+ years of relevant experience.
• A degree from an accredited College/University in the applicable field of services is required.
• Certifications required:- Penetration testing, OSCP, GIAC, GPEN, GWAPT or GCPN.
• Highly skilled in web application testing, API testing, and network testing.
• Prior experience with Burp Suite Professional, or other similar DAST tools.
• Experience with AI and penetration testing AI.
• Experience with Kali Linux and most of the tools available in the distro for penetration testing.
• Experience with tools such as Metasploit Pro and Cobalt Strike for red team operations.
• Experience with Red Team engagements from planning to execution.
• Experience with phishing network users to gain access for lateral movement on the network.
• Experience with Purple Team engagements to test monitoring controls in coordination with engineering teams and CSOC teams.
• Proficiency in scripting, such as Python and/or PowerShell.
• Experience with penetration testing supporting PCI-DSS.
• Technical writing skills, along with ease in communicating concepts related to security vulnerabilities and attack path scenarios.
• Familiar with OWASP Application Security Verification Standard (ASVS) and MITRE ATT&CK framework.