Penetration Tester II

Shelby American, Inc.; Osseo (MN); On-site; USD 60,000 - 100,000; Full time

Job summary

Join a forward-thinking company as a Penetration Tester II, where you will engage in critical security assessments and vulnerability testing. This role is pivotal in identifying security risks and providing actionable recommendations to enhance client security. You will also collaborate with sales and marketing teams, contributing to business development and technical content creation. If you are driven by the challenge of protecting systems and enjoy working in a dynamic environment, this position offers the perfect platform for your skills and ambitions.

Qualifications

• 2+ years in penetration testing and vulnerability assessments required.
• Certifications like eJPT or CEH are essential.

Responsibilities

• Conduct vulnerability scans and penetration tests on client systems.
• Assist with incident response and provide risk mitigation recommendations.

Skills

Penetration Testing

Vulnerability Scanning

Social Engineering

Communication Skills

Detail Oriented

Accountability

Organizational Skills

Education

eJPT Certification

Certified Ethical Hacker (CEH)

GIAC Penetration Tester (GPEN)

Tools

Nessus

Metasploit

BurpSuite

TryHackMe

HacktheBox

Job description

Description

Position Summary:

The Penetration Tester II will conduct technical testing which includes but not limited to vulnerability scanning, penetration testing and social engineering to identify security risks. Based on the results of the testing, this position will then make recommendations for improvements through administrative, technical and physical controls. This position will also assist with incident response investigations and documentation surrounding the incident.

Roles and Responsibilities/ Essential Functions:

• Perform vulnerability scanning and penetration testing of Client’s infrastructure, systems and applications in accordance with best practices and regulatory requirements.
• Communicate identified risks with Heartland’s clients and provide recommendations for risk mitigation.
• Perform social engineering assessments such as email phishing, pretexting phone calls and physical entry, as well as provide recommendations for risk mitigation.
• Assist Information Security Consultants with review or analysis of technical projects and troubleshooting.
• Assist the Sales Team Member efforts by supporting initial scoping conversations and performing needs analyses to help drive business development efforts. Identify additional opportunities within existing client base and work with client to expand usage of Heartland’s service portfolio.
• Contribute to marketing activities by providing content suggestions and writing blog articles covering technical topics and attending trade shows, conferences, and professional association chapter meetings.
• Maintain a minimum of 1350 hours billed per fiscal year, prorated based on start date. These charge hour requirements will be balanced against professional development and on-the-job training.

Requirements

Competencies:

• Accountability: Willingness to accept responsibility.
• Ambition: Demonstrates drive and initiative in seeking personal advancement or recognition.
• Business Acumen: Ability to understand and discriminate between various business-related topics and issues.
• Communication: Exceptional written, oral, interpersonal, and presentation skills.
• Detail Oriented: Ability to pay meticulous attention to all aspects of a situation or task.
• Ethical: Guided by the company’s accepted principles of moral conduct.
• Organized: Structured and methodical working skills.
• Persistence: Ability to continue in a course of action in the face of adversity.
• Working Under Pressure: Maintain composure when exposed to stress.

Required Experience:

• 2+ years working with penetration testing, vulnerability scanning/assessments.
• This can be on-the-job or demonstrated knowledge leveraging a platform like TryHackMe or HacktheBox.

Preferred Experience:

• 3+ years working with utilities such as Nessus, Metasploit, BurpSuite.
• 2+ years managing small projects.
• Ability to write executive-level reports showcasing findings and recommendations.

Required Skills, Education and/ or Certifications:

• Certifications: eJPT, Certified Ethical Hacker (CEH), or GIAC Penetration Tester (GPEN).
• Ability to work within a team environment.

Preferred Skills, Education and/ or Certifications:

• Professional Certifications Preferred – e.g., OSCP, PNPT.

Equal Opportunity Employer - Including Disabled and Veterans

#HBS