Penetration Tester | Federal Security & Threat Research

Acuity, Inc.; United States; On-site; USD 175,000 - 200,000; Full time

Benefits offered by this job

Health/Dental/Vision

Training & development benefit

401K matching

Corporate events/team-building

Job summary

Acuity, Inc. is seeking a Penetration Tester to conduct internal penetration testing of servers, web applications, services and databases, and to perform security reviews with reporting to strengthen defense measures.

The role requires rigorous testing, documentation and clear communication of findings to technical and non-technical stakeholders. The position supports federal engagements, and candidates should have TS/SCI w/Poly clearance.

Qualifications

• Experience with NIST 800-53 and RMF controls.
• Ability to coordinate with developers, system admins, PMs and senior government stakeholders.

Responsibilities

• Conduct internal penetration testing of servers, web apps, services and databases.
• Perform security reviews, research and provide reporting to improve defenses.
• Manually exploit and compromise operating systems, web apps and databases.
• Review scan results and static code analysis to identify vulnerabilities.
• Identify misconfigurations and compliance gaps.
• Write final reports with risk, mitigation and references.
• Provide security recommendations for developers, admins and managers.
• Report vulnerabilities identified during assessments.
• Draft RoE, Test Plans and SOPs for engagements.

Skills

NIST 800-53 RMF

Audience coordination

Tools

AWS Cloud Security

Job description

Acuity, Inc. is seeking a Penetration Tester to conduct internal penetration testing of servers, web applications, services and databases, and to perform security reviews with reporting to strengthen defense measures.

The role requires rigorous testing, documentation and clear communication of findings to technical and non-technical stakeholders. The position supports federal engagements, and candidates should have TS/SCI w/Poly clearance.