Senior Penetration Tester

Goldbelt; United States; Remote; USD 90,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with company matching

Tax-deferred savings options

Supplementary benefits

Paid time off

Professional development opportunities

Job summary

Goldbelt is seeking a Senior Penetration Tester in the United States to independently conduct penetration testing of applications, systems, and enclaves. You will identify security flaws and devise mitigation strategies to reduce cybersecurity risks and improve overall posture.

The role requires substantial hands-on testing experience with tools like NESSUS, Metasploit, Burp Suite, and NMAP, plus credentials for a DOD SECRET clearance.

Qualifications

• Minimum six (6) years proven proficiency in performing extensive vulnerability assessment and penetration testing.
• Minimum three (3) years of experience with testing tools, including NESSUS, METASPLOIT, CANVAS, NMAP, Burp Suite, and Kismet
• Minimum three (3) years of experience with network vulnerability assessments and penetration testing methods
• Minimum three (3) years of experience with writing testing assessment reports
• Minimum two (2) years of experience with using, administering, and troubleshooting a WINDOWS Server, IIS
• Minimum two (2) years of experience with using, administering, and troubleshooting a major version of Linux
• Minimum two (2) years of experience PCI DSS testing
• Possess a certification in penetration testing, such as: Licensed Penetration Tester (LPT); Certified Expert Penetration Tester (CEPT); Certified Ethical Hacker (CEH); Global Information Assurance Certification Penetration Tester (GPEN)
• Experience scripting in Perl, Python, Ruby, Bash, or Java
• Experience with wireless LAN security testing
• Required to possess a DOD SECRET Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) upon assignment

Responsibilities

• Performs application and network penetration testing and wireless security assessments.
• Applies offensive cybersecurity testing techniques, coordinate testing projects with internal and external system owners.
• Reports the nature of identified cybersecurity risks and recommends risk mitigation measures to improve the cybersecurity posture of the enterprise.

Skills

Networking

Documentation

OWASP

Databases & Web servers

Testing reports

Education

Bachelor's degree

Tools

NESSUS

METASPLOIT

CANVAS

NMAP

Burp Suite

Kismet

Job description

Location: United States

Overview

Please note that this position is contingent upon the successful award of a contract currently under bid.

Global in service but local in approach, Nisga'a Tek is committed to high-quality service to those who defend us. Nisga'a Tek ensures mission assurance and execution for customers and warfighters. Providing intelligence, IT, cyber security, training, logistics, administrative, acquisition, and background investigation services.

Summary:

The Senior Penetration Tester will independently perform penetration testing of applications, systems and enclaves Identifies security flaws in computing platforms and applications and devise strategies and techniques to mitigate identified cybersecurity risks.

Responsibilities

Essential Job Functions:

• Performs application and network penetration testing and wireless security assessments.
• Applies offensive cybersecurity testing techniques, coordinate testing projects with internal and external system owners.
• Reports the nature of identified cybersecurity risks and recommends risk mitigation measures to improve the cybersecurity posture of the enterprise.

Qualifications

Necessary Skills and Knowledge:

• Knowledge of TCP/IP protocols and networking architectures
• Excellent written documentation and oral presentation skills
• Knowledge of open security testing standards and projects, including OWASP
• Knowledge of databases, applications, and Web server design and implementation
• Possess oral and written communication skills

Minimum Qualifications:

• Minimum six (6) years proven proficiency in performing extensive vulnerability assessment and penetration testing
• Minimum three (3) years of experience with testing tools, including NESSUS, METASPLOIT, CANVAS, NMAP, Burp Suite, and Kismet
• Minimum three (3) years of experience with network vulnerability assessments and penetration testing methods
• Minimum three (3) years of experience with writing testing assessment reports
• Minimum two (2) years of experience with using, administering, and troubleshooting a WINDOWS Server, IIS
• Minimum two (2) years of experience with using, administering, and troubleshooting a major version of Linux
• Minimum two (2) years of experience PCI DSS testing
• Possess a certification in penetration testing, such as:
  • Licensed Penetration Tester (LPT)
  • Certified Expert Penetration Tester (CEPT)
  • Certified Ethical Hacker (CEH)
  • Global Information Assurance Certification Penetration Tester (GPEN)
• Experience scripting in Perl, Python, Ruby, Bash, or Java
• Experience with wireless LAN security testing
• Required to possess a DOD SECRET Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) upon assignment

Preferred Qualifications:

• Bachelor’s degree in a related field

Pay and Benefits

The annual salary range for this position is $90,000 - $150,000.

At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including

• medical, dental, and vision insurance
• a 401(k) plan with company matching
• tax-deferred savings options
• supplementary benefits
• paid time off
• professional development opportunities