Penetration Tester

Specialized Security Services, Inc. (S3 Security); Plano (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Specialized Security Services, Inc. (S3 Security) is seeking a Penetration Tester to identify and exploit security vulnerabilities across networks, apps, and systems, simulating real-world cyberattacks.

You will test, document, and report security weaknesses while proposing remediation strategies to strengthen defenses. You will work with team members and clients to perform penetration testing using S3 Security methodologies aligned with industry standards and regulatory requirements.

Qualifications

• Bachelor-level degree in Computer Science, Engineering, or related field.
• OSCP/OSWE/OSEP/OSCE or equivalent preferred.
• CREST/GIAC/SANS certifications are a plus.
• Experience with PCI, NIST, ISO, CIS frameworks is desirable.

Responsibilities

• Conduct network, web app, API, cloud, database, OT, wireless, mobile, social, and other types of penetration testing.
• Perform vulnerability assessments and penetration testing engagements.
• Create detailed reports with findings and remediation recommendations.
• Collaborate with clients and internal teams to meet security objectives.
• Maintain and improve S3 Security methodologies and best practices.

Skills

Penetration testing

Reporting

Problem solving

Team collaboration

Education

University degree in CS or Engineering

Tools

Firewalls

IDS

Antivirus software

Authentication systems

Log management

Content filtering

Job description

About Specialized Security Services, Inc.

For over two decades, our expert team has successfully assisted organizations with the implementation and oversight of their information security, privacy, and regulatory compliance programs. Our reputation is our own, built upon our steadfast commitment over the years to do the right thing and go above and beyond for our clients. We pride ourselves on our ability to think outside-the-box, stay nimble and succeed as a team. Additionally, education is important to Specialized Security Services, Inc. We encourage all team members to grow their knowledge base through continuing education, and as such offers reimbursement for industry related certifications.

Position Summary

The Cybersecurity Penetration Tester role offers an exciting opportunity to work on a range of high-profile client engagements while continuing to deepen their skills and broaden their impact on the security community as a whole.

The Penetration Tester (Ethical Hacker) will be responsible foridentifying and exploiting security vulnerabilities in networks, applications, and systems by simulating real-world cyberattacks. They are responsible for testing, documenting, and reporting security weaknesses while recommending remediation strategies to strengthen defenses. Key skills include network security, scripting, and using hacking tools.

They will work with team members and clients during penetration and vulnerability management engagements, as a trusted partner and cybersecurity professional to complete the cybersecurity contracted services dictated in the engagements and agenda call to meet and exceed client expectations. The Penetration Testor will perform penetration testing using the S3 Security methodologies based off of regulatory and industry requirements and standards, as well as security best practice frameworks.

The Cybersecurity Penetration Tester is a trusted advisor to clients, and through objective penetration testing and results reporting, supports the client in making well-informed, risk-based decisions to improve overall security posture.

Responsibilities

• Conduct network, web application, API, cloud, database, OT, wireless, mobile, social, and other types of penetration testing, code reviews, social engineering, red team engagements, and physical security assessments.
• Conduct security assessments on a wide variety of technologies and implementations.
• Simulate sophisticated cyberattacks for clients worldwide.
• Being part of a global team of penetration testers, sharing knowledge and methodologies.
• Running and conducting penetration test projects with minimal oversight.
• Perform Vulnerability Assessments, Penetration Test, Ethical Hacking, Firewall Assessments, Social Engineering engagements.
• Manage priorities and tasks to achieve utilization targets.
• Advise clients on technical security or compliance activities.
• Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.
• Participate in the development and implementation of the enterprise security architecture and supporting security standards to ensure compliance with corporate policies, and relevant legislative and regulatory requirements.
• Either handle or escalyze client and project-related issues in a timely manner.
• Collaborates with the business operation, digital business teams and quality assurance to drive customer satisfaction.
• Pursues additional, industry ‑ relevant certifications as needed to stay ahead of emerging threats and maintain advanced proficiency in the role.
• Maintain all certifications that are active at the time of hire and any certifications obtained during employment.
• Other duties, as assigned.

Qualifications & Experience

• 2+ years of professional experience in a penetration testing role.
• Ensures quality reports and services are delivered efficiently and on time.
• Should be well versed in all aspects of penetration testing, with an emphasis on web applications, internal networks, and external networks.
• Problem solving skills and the ability to work under pressure in a fast-paced environment.
• Experience with security hardening techniques and policy development, particularly regarding secure software development methodologies and process
• In depth knowledge of Windows/Linux/UNIX operating systems
• Demonstrates advanced knowledge of the principles, best practices architecture and design approaches to applicable capabilities, services, and standard controls.
• Experience with one or more IT security compliance frameworks (PCI, NIST, ISO, CIS)
• Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
• Operates with professionalism both internally and with clients.

Education & Certifications

• A university degree in Computer Science, Engineering, or related work experience.
• Offensive Security Certifications preferred, such as OSCP, OSWE, OSEP, OSCE
• CREST CRT, CCT INF, CCT APP, CCRTS, CCSAS
• SANS GIAC GXPN, GCPN, GPYC, GPEN, GWAPT, GRTP, GX-PT
• Certified Ethical Hacker (CEH)
• Vulnerability Management/Assessment tools
• Penetration Testing tools
• The penetration tester understands that, due to the rapidly evolving cybersecurity landscape, maintaining this role will require obtaining additional certifications to keep up with the cyber security threat landscape and industry acceptable certifications.