Senior Penetration Testing & Software Assurance Engineer

One Federal Solution; Washington; On-site; USD 150,000 - 190,000; Full time

Job summary

One Federal Solution is seeking a highly skilled cybersecurity professional to provide senior-level penetration testing, software assurance, and vulnerability assessment engineering support. The successful candidate will conduct comprehensive security assessments using industry-standard automated tools and develop actionable remediation recommendations.

Responsibilities include supporting vulnerability management, security patching, secure cloud and hybrid environment engineering, and Cross

Qualifications

• Minimum 10 years of total related experience.
• Minimum 2 years of recent experience in software assurance, penetration testing, vulnerability assessment, security patch management, secure cloud/hybrid engineering, and CDS.
• CEH and CISSP certifications, or comparable demonstrable experience.
• Experience supporting vulnerability identification, assessment, remediation tracking, and secure engineering activities.

Responsibilities

• Provide senior-level penetration testing, software assurance, and vulnerability assessment engineering support.
• Conduct software assurance activities and penetration testing using automated tools.
• Support vulnerability management, security patching, secure cloud/hybrid engineering, and CDS activities.
• Identify, analyze, document, and communicate vulnerabilities and remediation recommendations.
• Support secure engineering practices across cloud, hybrid, and software environments.

Education

CEH Certification

CISSP Certification

Job description

One Federal Solution is seeking a highly skilled cybersecurity professional to provide senior-level penetration testing, software assurance, and vulnerability assessment engineering support. The successful candidate will conduct comprehensive security assessments using industry-standard automated tools and develop actionable remediation recommendations.

Responsibilities include supporting vulnerability management, security patching, secure cloud and hybrid environment engineering, and Cross