Penetration Tester II

SiloSmashers; Arlington (VA); Remote; USD 80,000 - 130,000; Full time

Job summary

An innovative firm is seeking a skilled Penetration Tester to enhance security by identifying vulnerabilities in systems and networks. This role involves performing comprehensive assessments, developing security protocols, and collaborating with stakeholders to ensure robust security measures are in place. The ideal candidate will have extensive experience in penetration testing, particularly with cloud environments, and will serve as a key advisor on security risks. If you are passionate about cybersecurity and want to make a significant impact in a dynamic environment, this opportunity is for you.

Qualifications

• 4+ years of penetration testing experience required.
• Experience with cloud FedRamp systems (Azure, AWS, GCP) is essential.

Responsibilities

• Perform penetration tests on hosts, networks, and applications.
• Develop security test plans and provide expert technical support.

Skills

Penetration Testing

Cloud Security (FedRamp)

Security Assessments

Source Code Review

Effective Communication

Education

BS/BA in Computer Science

BS/BA in Information Systems

BS/BA in Software Engineering

Job description

Summary of Position

SiloSmashers is looking for a Penetration Tester to provide testing for weakness identification, exploitation, and analysis to determine the security impacts to current systems and networks. The individual will serve as principal security advisor on risk matters, technical and otherwise, involving the identification and prioritization of security risk to CISA CSD information systems.

Principle Duties and Responsibilities

1. Perform host, network, cloud, application-based penetration test assessments.
2. Responsible for creating and updating the master schedule of all security assessments and for delivering it to the Government for approval.
3. Develop standard operating procedures, security test plans, assessment schedules, and Rules of Engagement for stakeholders' assessment results and recommendations; provide expert technical support for potential targets both before and after the assessment.
4. Complete communication and reporting activities: assessment kickoff meeting, daily statuses, and out-brief meeting.
5. Perform annual, ongoing, and ad-hoc assessments that support the continuous monitoring strategy for all systems with an ATO.
6. Collaborate with authorizing officials and/or system owners to plan penetration test assessments as needed.
7. Conduct source code reviews for security vulnerabilities.
8. Conduct security assessments on a wide variety of technologies and implementations.

Required Skills, Knowledge and Experience

1. BS/BA in Computer Science, Information Systems, Software Engineering or other related analytical, scientific or technical discipline.
2. 4+ years of penetration testing experience.
3. 3+ years of experience pentesting cloud FedRamp systems (Azure, AWS, GCP).
4. Effective written and oral communication skills.
5. Previous Federal Government experience is a plus.

Security Clearance

• Minimum Secret

Work Location

• 100% remote with occasional on-site visits as needed.