Senior Cloud Penetration Tester | FedRAMP Focus

Doist; Herndon (VA); On-site; USD 165,000 - 185,000; Full time

Benefits offered by this job

Medical insurance

401K with match

Training stipends

Certification reimbursements

Annual bonuses

Job summary

Fortreum is a trusted leader in cloud and cybersecurity services, expanding capabilities for FedRAMP and other compliance frameworks with offensive and defensive solutions. We seek candidates experienced in conducting penetration tests for cloud service providers supporting FedRAMP and related programs.

Responsibilities include testing networks, applications, and systems; developing testing methodologies; advising clients on vulnerabilities and remediation; and delivering final reports on time.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field, or 5+ years of equivalent penetration testing experience.
• 4+ years of professional services experience (consulting).
• 5+ years of web and network penetration testing experience.
• Proficiency in scripting languages (bash, Python, PowerShell, Ruby).
• Active Top Secret clearance or ability to obtain one.

Responsibilities

• Conduct penetration tests on networks, applications (APIs, mobile apps, web) and systems to identify vulnerabilities and meet client objectives.
• Develop and refine testing methodologies, tools, and techniques against evolving threats.
• Advise on vulnerabilities, remediation steps, and compliance requirements.
• Prepare final deliverables within established timelines and maintain client relationships.
• Mentor junior team members and provide knowledge sharing and training.

Skills

Penetration testing

Cloud security

Scripting languages

Security frameworks

Clearance readiness

Education

Bachelor's degree in Computer Science or Information Security

Tools

Penetration testing tools

Job description

Fortreum is a trusted leader in cloud and cybersecurity services, expanding capabilities for FedRAMP and other compliance frameworks with offensive and defensive solutions. We seek candidates experienced in conducting penetration tests for cloud service providers supporting FedRAMP and related programs.

Responsibilities include testing networks, applications, and systems; developing testing methodologies; advising clients on vulnerabilities and remediation; and delivering final reports on time.