Senior Pen Tester & Adversary-Emulation Lead (Onsite)

skyepointdecisionsinc; Vansville (MD); Sur place; USD 120 000 - 160 000; Plein temps

Résumé du poste

SkyePoint Decisions is seeking a Senior Pen Tester/Pentest Operator to support a Department of State program. The role involves leading pen testing engagements on High Value Asset systems, web applications, AD assessments, and adversary emulation.

Onsite in Beltsville, MD, five days a week with no hybrid option. The ideal candidate has hands-on offensive security experience, strong client-facing communication, and the ability to translate findings into risk-based recommendations for system

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a

Responsabilités

• Performing penetration testing activities across internal networks, external networks, web applications, enterprise systems, cloud-connected systems, and mission environments.
• Supporting High Value Asset (HVA) cybersecurity assessments by identifying and communicating exploitable vulnerabilities, validating security control effectiveness, and determining risk to critical systems and data.
• Conducting network mapping, reconnaissance, vulnerability validation, exploitation, post exploitation analysis, and documentation of attack paths within approved Rules of Engagement.
• Draft and/or provide input into Rules of Engagement, test plans and objectives, scope input and documentation, and revising and updating assessment procedures required to obtain management and stakeholder approval.
• Deliver technical and executive out-briefs to client stakeholders, including system owners, security operations teams, engineering teams, and senior leaders.

Description du poste

SkyePoint Decisions is seeking a Senior Pen Tester/Pentest Operator to support a Department of State program. The role involves leading pen testing engagements on High Value Asset systems, web applications, AD assessments, and adversary emulation.

Onsite in Beltsville, MD, five days a week with no hybrid option. The ideal candidate has hands-on offensive security experience, strong client-facing communication, and the ability to translate findings into risk-based recommendations for system