Penetration Tester

Dark Wolf Solutions; Ogden, Salt Lake City (UT, UT); Hybrid; USD 100,000 - 140,000; Full time

Benefits offered by this job

Relocation assistance

Sign-on bonus up to $25,000

Job summary

Dark Wolf Solutions, LLC is seeking a Penetration Tester to plan and perform cross-domain vulnerability assessments, full-scale penetration testing, and red team operations.

The role requires familiarity with Windows, Linux, mobile OSs, cloud and on-prem deployments, and the ability to analyze networks and applications to craft remediation strategies. Hybrid role based near Hill AFB, Ogden, UT with relocation assistance and sign-on bonuses up to $25,000.

Qualifications

• 3+ years’ experience in multiple penetration testing and red team areas.
• Experience with Windows, Linux, mobile OS environments.
• Ability to analyze networks, applications, and cloud deployments.
• Experience drafting reports and presenting findings.
• Willingness to travel occasionally and hold US citizenship with active clearance.

Responsibilities

• Lead and perform cross-domain vulnerability assessments and pen tests.
• Develop or contribute tooling for custom testing and automation.
• Prepare assessment reports and remediation strategies for clients.
• Coordinate with clients and internal teams across engagements.

Skills

Intelligence analysis

Network engineering

Penetration testing

Red team operations

Software engineering

Exploit development

Vulnerability assessment

Written/verbal communication

Travel willingness

Education

BS in Cybersecurity/Info Security/IT/EE/Net Eng/CS

Tools

Kubernetes

AWS

Azure

GCP

Job description

Dark Wolf is looking for a Penetration Tester who will plan and perform continuous cross-domain vulnerability assessments, full-scale penetration testing and red team operations. The ideal candidate must display familiarity with both cloud-based and on-premises Windows, Linux and mobile operating systems and environments and be able to conduct network and application security vulnerability analysis. The candidate will analyze both commercial and federal mission systems to help identify potential vulnerabilities and help to provide and implement remediation strategies to customers for these issues. The successful candidate must have prior experience with multiple facets of penetration testing, using and ideally developing or contributing to both open source and proprietary tools. Conducts open-source research on clients and their infrastructure to help identify data leakage that could lead to vulnerabilities. Leverages programming knowledge to develop custom tools and exploits both for targeting unique client systems and building internal testing capabilities. Prepares assessments and presentations of analyses and findings. Develops and maintains analytical procedures to meet changing requirements and ensure effective operations. This is a hybrid position basedon Hill Air Force Base in Ogden, UT. Relocation assistance and sign-on bonuses up to $25,000.00 are available, commensurate on skillset and experience level.

Duties/Responsibilities

Candidates may be asked to move between projects and participate in either single engagement penetration tests or continuous engagement Red Teams. The position will primarily require the candidate to lead the technical aspect of a specific, long-term penetration testing effort, helping to conduct varied testing efforts against applications and networks for the federal government. Candidates may also be placed on a larger Red Team and be expected to develop a continuous campaign-based assessment that emulates the target’s real-world adversaries by developing new tools specific to the target. Candidates will be expected to integrate into ongoing testing efforts, requiring subject matter expertise in multiple disciplines of vulnerability testing and assessment, the ability to interact and liaison directly with clients and a strong ability to write and document findings. Travel is required on an occasional basis for clients requiring onsite testing.

Required Qualifications

• 3+ years’ experience in three or more specific areas to include: intelligence analysis, network engineering, networking security, penetration testing, red team operations, hardware engineering, software engineering, exploit development, reverse engineering, vulnerability assessment, physical security assessments, social engineering
• Strong knowledge of testing simulated intrusion attempts and physical penetration testing
• Proficiency in the testing and assessment of mobile operating systems, embedded systems and/or IoT devices
• Familiarity with unmanned aerial vehicles and associated mobile and wireless technologies
• Proficiency of various operating systems: Windows, iOS, Android, Mac or Linux
• Proficiency with cloud technology and deployments: Amazon Web Services, Microsoft Azure, Google Cloud Platform
• Moderate competency in at least one scripting and/or coding language
• Working knowledge of software development, with preference for experience working around software development teams and efforts
• Experience in network analysis methodologies
• Experience in drafting reports, documenting case details, and being able to summarize findings and recommendations based on system analysis
• Demonstrated strong written and verbal communication skills
• BS (or equivalent) in Cybersecurity, Information Security, IT, EE, Network Engineering, Computer Science, or related field
• Willingness to travel occasionally
• US Citizenship and an active Secret clearance with the ability to be upgraded to a Top Secret level.

Desired Qualifications

• Familiarity with container technologies to include container orchestration and microservices
• Experience with DevSecOps and adjacent tools; strong preference for experience with Kubernetes, software development pipelines
• Security Certification: CEH, OSCP, PNPT or similar security/pentesting certs
• Experience employing advanced forensic tools and techniques for attack reconstruction, including dead system analysis and volatile data collection and analysis
• Experience in performing post-incident computer forensics without destruction of critical data.
• Desired experience ensuring quality assurance and the spreading of best practices
• MS degree in technical field
• Security+ Certification

This position is located in Ogden, UT.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Dark Wolf Solutions’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.