Penetration Tester, Expert (Federal agency) - Tysons, VA - Full Time

iSoftTek Solutions Inc; Tysons (VA); On-site; USD 80,000 - 130,000; Full time

Job summary

An established industry player is seeking an expert Penetration Tester to join their dynamic team. This full-time role involves conducting in-depth penetration testing and vulnerability assessments for various systems, including servers, web applications, and databases. The ideal candidate will possess a strong background in security frameworks and have the ability to communicate effectively with diverse stakeholders. If you have a passion for cybersecurity and a commitment to enhancing security measures, this opportunity is perfect for you. Join a forward-thinking company dedicated to maintaining the highest security standards and making a significant impact in the federal sector.

Qualifications

• 4+ years experience with a PhD in penetration testing.
• Certifications: CEH, CPT are highly desired.

Responsibilities

• Conduct internal penetration testing and vulnerability assessments.
• Identify vulnerabilities and provide security recommendations.
• Write reports and defend findings to stakeholders.

Skills

Penetration Testing

Vulnerability Assessment

Operating Systems Exploitation

Web Applications Security

Database Security

NIST 800-53

Risk Management Framework

Technical Writing

AWS Cloud Security

Education

PhD

Master's Degree

Bachelor's Degree

Associate's Degree

High School Diploma

Job description

Penetration Tester, Expert (Federal agency)

Core Hours: 9:00 am – 3:00 pm

Location: Tysons, VA

• Job Type: Full-time (40 hours per week) with benefits.

• Availability: immediate.

• Security Clearance: TS/SCI with CI of FS Polygraph.

Years of Experience:

1. 4 years with a PhD
2. 8 years with a BS degree
3. 6 years with a master’s degree
4. 10 years with an AA degree
5. 12 years with an HS diploma

Job Description

Required Skills

1. Conduct internal penetration testing and vulnerability assessment of servers, web applications, web services, and databases.
2. Manually exploit and compromise operating systems, web applications, and databases.
3. Examine results of web/OS scanners, scans, and static source code analysis.
4. Identify vulnerabilities, misconfigurations, and compliance issues.
5. Write final reports, defend all findings to include the risk or vulnerability, mitigation strategies, and references.
6. Ability to meet and coordinate with various audiences to include developers, system administrators, project managers, and senior government stakeholders.
7. Provide security recommendations for developers, system administrators, project managers, and senior government stakeholders.
8. Report vulnerabilities identified during security assessments.
9. Write penetration testing Rules of Engagements (RoE), Test Plans, and Standard Operating Procedures (SOP).
10. Conduct security reviews, technical research, and provide reporting to increase security defense mechanisms.
11. Experience with NIST 800-53 and Risk Management Framework.

Desired Skills

1. Certifications: CEH – Certified Ethical Hacker Certification, CPT – Certified Penetration Tester.
2. Strong writing skills.
3. Experience with AWS Cloud Security.