Penetration Tester

Cybersecurity Jobs; Lexington (KY); On-site; USD 85,000 - 115,000; Full time

Benefits offered by this job

Major Medical Plan with Prescription

Dental Plan

Vision

Disability Insurance

Retirement Plan 401(k)

ESOP

Comprehensive Leave

Holidays

Job summary

Enterprise Technical Assist Servs (ETAS) is seeking a hands-on Penetration Tester to join the Cyber Security Assessment Team in Lexington, KY. The role emphasizes practical testing, vulnerability assessments, and adversarial emulation across diverse information systems.

You will develop mitigation strategies, communicate findings to technical and leadership teams, and support both scheduled and ad hoc assessments in a federal-oriented environment.

Qualifications

• Prior penetration testing experience is required. This is not an entry level position.
• Bachelor’s degree in an IT related subject matter from an accredited college or university, plus at least three years of operational penetration testing experience.
• Ability to participate in or lead penetration testing assessments with minimal oversight.

Responsibilities

• Engage in technical testing of information systems to support scheduled and impromptu assessment activities.
• Support assessment activities including risk assessment, vulnerability assessment, and adversarial emulation.
• Develop and advise on vulnerability mitigation strategies using current industry best practices and federal standards.

Skills

Penetration testing

Vulnerability assessment

Technical risk evaluations

Education

Bachelor's degree in IT/CS related field

Tools

nmap

Burp Suite

Metasploit

Cobalt Strike

Tenable

CrowdStrike

Job description

Enterprise Technical Assist Servs (ETAS) is hiring a Penetration Tester for its Cyber Security Assessment Team. The role focuses on hands-on technical testing, including vulnerability assessment and penetration testing, and supports both scheduled and ad hoc assessment needs across logically and geographically separated information systems.

Role Overview

As part of the assessment team, you will participate in technical risk and security evaluations such as penetration testing, application and web security testing, and adversarial emulation. You will also develop and advise operational and leadership teams on vulnerability mitigation approaches aligned with current industry best practices and applicable federal standards.

Responsibilities

• Engage in technical testing of logically and geographically separate information systems to support both scheduled and impromptu assessment activities.
• Support assessment activities that may include technical risk assessment, vulnerability assessment, penetration testing, application/web security testing, and adversarial emulation.
• Develop and advise operational and leadership teams on potential vulnerability mitigation strategies using current industry best practices and federal standards.

Requirements

• Prior penetration testing experience is required. This is not an entry level position.
• Bachelor’s degree in an IT related subject matter area from an accredited college or university, plus at least three years of operational penetration testing experience.
• Ability to participate in or lead penetration testing assessments, including professional correspondence with different contracting companies and federal personnel, with minimal management or supervisory oversight.
• Proficiency in Microsoft Office Suite, including creation of formal, well-formatted, and grammatically accurate assessment reports and presentations.
• Proficiency in common cybersecurity tools including nmap, burpsuite, Metasploit, Cobalt Strike, Tenable Security Center, and Crowdstrike.
• Experience and proficiency with at least one or more programming or scripting languages.
• Excellent oral and written communication skills.
• Ability to work independently or in a team environment.
• Maintain professionalism in deliverables and interactions with fellow employees and client personnel.

Technologies

• Microsoft Office Suite
• nmap
• burpsuite
• Metasploit
• Cobalt Strike
• Tenable Security Center
• Crowdstrike

Benefits

• Major Medical Plan with Prescription Card
• Dental Plan
• Vision
• Disability Insurance
• Retirement Plan 401(k)
• Employee Stock Ownership Program (ESOP)
• Comprehensive Leave
• Holidays

Federal Government Clearance

• This position may require the ability to obtain a government clearance.
• This position may require reviews and testing for absence of illegal drugs, along with a background investigation by the Federal government to obtain access authorization prior to employment.
• Subsequent reinvestigations may be required.

Preferred Qualifications

• Knowledge of national security systems and industrial control systems.
• Experience with pentesting web applications and cloud environments.
• Possession of CISSP, CISM, or similar professional certification.
• Possession of OSCP, GPEN, CRTO, or equivalent technical certification.

Additional Details

• Employment type: Direct Hire
• Job location: Lexington, KY area (onsite)
• EEO: Equal Opportunity Employer including Vets/Disability/LGBT
• Pay rate: Please submit salary or hourly rate requirements along with resume or in a cover letter.