Penetration Tester

Skyline Technology Solutions, LLC.; Maryland; On-site; USD 120,000 - 180,000; Full time

Job summary

Skyline Technology Solutions, LLC. seeks an experienced Penetration Tester to conduct security assessments of network-connected devices and ITS infrastructure.

The role emphasizes hands-on testing, evaluating device configurations, and delivering actionable remediation recommendations to clients. The candidate will perform manual and automated testing, communicate findings clearly to technical and non-technical stakeholders, and stay current with evolving vulnerabilities and testing

Qualifications

• Bachelor's degree preferred; equivalent work experience accepted.
• 5+ years of relevant cybersecurity experience, including hands-on penetration testing.
• Security certifications such as OSCP, GPEN, PNPT, or equivalent.
• Experience with Burp Suite Pro, Ghostwriter, and n8n.
• Strong Burp Suite proficiency: Proxy, Repeater, Intruder, and related tools.
• Ability to analyze HTTP/HTTPS requests/responses and identify auth/session vulnerabilities.
• Familiarity with vulnerability classification, CVSS, CWE, and NIST frameworks.
• Experience documenting security findings and developing professional pentest reports.
• Strong analytical, troubleshooting, and technical communication skills.
• Ability to work independently while collaborating with a team.

Responsibilities

• Conduct penetration tests and security assessments of network-connected devices, embedded systems, web interfaces, APIs, and supporting technologies.
• Perform manual and automated testing to identify, analyze, and validate vulnerabilities, including issues in authentication, authorization, session management, input validation, network services, and access controls.
• Evaluate device configurations and security controls against industry best practices and applicable standards.
• Use security tools, scripting languages, and established testing methodologies for thorough assessments.
• Document testing activities, evidence, confirmed vulnerabilities, risks, and remediation recommendations in professional reports.
• Clearly communicate technical findings and risk-based recommendations to technical and non-technical stakeholders.
• Collaborate with team members to investigate complex vulnerabilities and improve testing procedures and capabilities.
• Research emerging vulnerabilities, attack techniques, and advances in penetration-testing tools relevant to assessed technologies.

Skills

Penetration testing

Cybersecurity experience

Analytical thinking

Technical communication

Education

Bachelor's degree in Cybersecurity/Information Systems

Tools

Burp Suite Pro

Ghostwriter

n8n

Job description

We are seeking an experienced Penetration Tester to conduct and support security assessments of network-connected devices and technologies, with an emphasis on Intelligent Transportation Systems (ITS) and transportation infrastructure. This role focuses on identifying and validating security vulnerabilities through hands-on laboratory testing, evaluating device security configurations and controls, and providing actionable, risk-based remediation recommendations to clients.

You can expect to spend your time accomplishing the following:

• 60% of the time on Objective 1: Penetration Testing
• 10% of the time on Objective 2: Project Coordination and Tracking
• 10% of the time on Objective 3: Reporting Quality Assurance
• 10% of the time on Objective 4: Cybersecurity Subject Matter Expert
• 10% of the time on Objective 5: Personal Growth and Development.

Job Responsibilities – What to Expect

• Conduct penetration tests and security assessments of network-connected devices, embedded systems, web-based management interfaces, APIs, and supporting technologies.
• Perform manual and automated testing to identify, analyze, and validate vulnerabilities, including weaknesses in authentication, authorization, session management, input validation, network services, and access controls.
• Evaluate device configurations and security controls against industry best practices and applicable security standards.
• Use security tools, scripting languages, and established testing methodologies to perform thorough and repeatable assessments.
• Document testing activities, technical evidence, confirmed vulnerabilities, associated risks, and actionable remediation recommendations in professional reports.
• Clearly communicate technical findings and risk-based recommendations to technical and non-technical stakeholders.
• Collaborate with team members to investigate complex vulnerabilities and improve testing procedures, methodologies, and technical capabilities.
• Research emerging vulnerabilities, attack techniques, security risks, and advances in penetration-testing tools and methodologies relevant to assessed technologies.

Your Knowledge & Expertise

• Bachelor's degree in Cybersecurity, Information Systems, or a related field preferred; equivalent work experience accepted.
• 5+ years of relevant cybersecurity experience, including hands-on penetration testing experience.
• Relevant security certifications such as OSCP, GPEN, PNPT, or equivalent practical experience.
• Experience with tools such as Burp Suite Professional, Ghostwriter, n8n
• Strong hands-on proficiency with Burp Suite, including Proxy, Repeater, Intruder, and other tools used for manual web application and API security testing.
• Demonstrated ability to analyze HTTP/HTTPS requests and responses, manipulate application traffic, and identify vulnerabilities in authentication, session management, and access controls.
• Familiarity with vulnerability classification, severity scoring, and cybersecurity frameworks such as NIST, CVSS, and CWE.
• Experience documenting technical security findings and developing professional penetration test reports.
• Strong analytical, troubleshooting, and technical communication skills.
• Ability to work independently while collaborating with a team to meet project objectives.