Penetration Tester

Jobtailor; Virginia (MN); On-site; USD 120,000 - 180,000; Full time

Job summary

Jobtailor in the United States is seeking a senior Penetration Tester to lead engagements across customer networks, applications (API, web, and mobile), and social engineering efforts. You will work with clients to scope, execute, and report on findings.

The role requires strong knowledge of testing methodologies, experience with OWASP, MITRE ATT&CK, OSSTMM, PTES, and the ability to obtain or maintain Top Secret clearance.

Qualifications

• Bachelor's degree or 4 years of equivalent job experience.
• 2+ years of professional services experience.
• 3+ years of web application and network penetration testing experience.
• Proficient in at least one scripting language (Bash, Python, PowerShell, Ruby).
• Strong knowledge of penetration testing methodologies.
• Familiarity with frameworks such as OWASP, MITRE ATT&CK, OSSTMM, PTES.
• Ability to work in a SCIF in Northern Virginia or Seattle, Washington.
• Active Top Secret clearance or ability to obtain TS clearance.

Responsibilities

• Work closely with the team to conduct penetration testing of customer networks, applications (API, web, and mobile), and/or social engineering activities to achieve the customer’s objectives of the engagement.
• Advise customers on details of vulnerabilities, remediation strategies, and compliance requirements
• Prepare final deliverables for delivery to customers within established timelines
• Establish and maintain positive relationships with customers and stakeholders
• Coordinate project readiness with internal teams and customers
• Pursue continuous professional development in by achieving industry specific certifications (must be willing to meet FedRAMP certification requirements as outlined by A2LA)
• Perform project readouts with customers to notify them of the outcome of their penetration test
• Train and mentor junior team members
• Interface with customers and other internal delivery team members through entire engagement, interacting will all levels of customer organizations

Skills

Penetration Testing

Web Application Testing

Network Penetration Testing

Bash

Python

PowerShell

Ruby

Scripting Languages

Top Secret Clearance

Project Management

Customer Relationship Management

Team Collaboration

Mentoring

Education

Bachelor's Degree

Tools

OWASP

MITRE ATT&CK

OSSTMM

PTES

Job description

• Work closely with all members of the team to conduct penetration testing of customer networks, applications (API, web, and mobile), and/or social engineering activities to achieve the customer’s objectives of the engagement.


• Advise customers on details of vulnerabilities, remediation strategies, and compliance requirements


• Prepare final deliverables for delivery to customers within established timelines


• Establish and maintain positive relationships with customers and stakeholders


• Coordinate project readiness with internal teams and customers


• Pursue continuous professional development in by achieving industry specific certifications (must be willing to meet FedRAMP certification requirements as outlined by A2LA)


• Perform project readouts with customers to notify them of the outcome of their penetration test


• Train and mentor junior team members


• Interface with customers and other internal delivery team members through entire engagement, interacting will all levels of customer organizations

Requirements

• Bachelor’s Degree or 4 years of equivalent job experience


• 2+ years of professional services experience


• 3+ years of web application and network penetration testing experience


• Proficient in at least one or more scripting languages (i.e., bash, python, PowerShell, ruby, etc.)


• Strong technical acumen with regards to penetration testing methodologies


• Familiarity with best practices frameworks such as OWASP, MITRE ATT&CK, OSSTMM, and/or PTES


• Ability to work in a SCIF in Northern Virginia or Seattle, Washington


• Active Top Secret clearance or ability to get a Top Secret clearance

Core Competencies

Demonstrates expertise in penetration testing methodologies, including web application and network testing, while effectively advising clients on vulnerabilities and compliance. Strong ability to mentor junior team members and maintain positive customer relationships throughout engagements.

Highest-signal resume keywords

• Penetration Testing


• Web Application Testing


• Network Penetration Testing


• Scripting Languages (Bash, Python, PowerShell, Ruby)


• Top Secret Clearance

ATS Optimization Keywords

Hard Skills

• Penetration Testing Methodologies


• Vulnerability Assessment


• Remediation Strategies


• Compliance Requirements


• Project Management

Soft Skills

• Customer Relationship Management


• Team Collaboration


• Mentoring

Certifications & Qualifications

• FedRAMP Certification

Industry Keywords

• Professional Services


• SCIF


• Security Clearance

Tools & Technologies

• OWASP


• MITRE ATT&CK


• OSSTMM


• PTES