VAPT Specialist

ControlCase, LLC; United States; On-site; USD 80,000 - 120,000; Full time

Benefits offered by this job

Company-Provided Equipment

401(k) Plan

Health Insurance

Dental & Vision Insurance

100% Company-Paid Life Insurance

Paid Time Off (PTO)

Mileage & Travel Reimbursement

Cell Phone & Internet Reimbursement

Employee Assistance Program (EAP)

Flexible Spending Account (FSA)

Employee Discount Program

Job summary

ControlCase, LLC, based in Fairfax, Virginia, is seeking a Penetration Tester to conduct authorized tests on computer systems. This role involves approximately 80% penetration testing and 20% management. Candidates will work remotely, with occasional client visits.

Qualified candidates will bring 4-5+ years of experience and must be US citizens or Green Card holders. Extensive knowledge of cybersecurity is essential, as well as the ability to present findings to various stakeholders.

Qualifications

• Experience in conducting authorized penetration tests on computer systems.
• Ability to travel to client locations as required.
• Knowledge of complex computer systems and technical cybersecurity terminology.

Responsibilities

• Identify testing requirements with clients.
• Plan and develop penetration testing methodologies.
• Conduct remote tests or on-site assessments to find security weaknesses.
• Prepare detailed reports on identified security issues.
• Present findings and recommendations to management.

Skills

Penetration testing

Client collaboration

Security assessment

Risk analysis

Education

4-5+ years of penetration testing experience

US Citizenship or Green Card holder

Tools

Offensive Security Certified Professional

CREST Practitioner Security Analyst

Global Information Assurance Certification

Job description

Remote – Including client visits as needed
Location: US Based Candidates Only

About ControlCase

ControlCase is a global leader in certification, cybersecurity, and continuous compliance services. We are dedicated to helping organizations develop and implement streamlined, cost-effective, and comprehensive information security and compliance programs for both on-premise and cloud environments. Our services cater to industries needing compliance with standards such as PCI DSS, HITRUST, SOC 2 Type II, ISO 27001, PCI PIN, PCI P2PE, PCI TSP, PA DSS, CSA STAR, HIPAA, GDPR, SWIFT, CMMC, and FedRAMP.

Headquartered in Fairfax, Virginia, ControlCase operates worldwide, with locations across North America, Europe, Latin America, Asia/Pacific, and the Middle East. We provide innovative Compliance as a Service (CaaS) solutions, enabling businesses to efficiently meet regulatory compliance requirements in a cost-effective manner.

As a Penetration Tester, you will conduct authorized penetration tests on computer systems to identify vulnerabilities that could be exploited. You may choose to specialize in areas such as:

• Networks and Infrastructure
• Operating Systems (Windows, Linux, and macOS)
• Web and Mobile Applications
• APIs and Web Services

The Penetration Tester role will be a blend of approximately 80% penetration testing and 20% project management. It will also involve understanding complex computer systems and technical cybersecurity terminology.

Key Responsibilities

• Collaborate with clients to identify testing requirements, including the number and type of systems to be tested.
• Plan and develop penetration testing methodologies, scripts, and test procedures.
• Conduct remote tests on client networks or perform on-site infrastructure assessments to identify security weaknesses.
• Simulate security breaches to evaluate system vulnerabilities.
• Prepare detailed reports outlining identified security issues, associated risks, and recommendations.
• Provide actionable guidance on risk mitigation and security improvements.
• Present findings, risks, and recommendations to management and stakeholders.
• Assess business and user impact related to identified vulnerabilities.
• Analyze the potential consequences of unresolved security flaws on business operations.

Required Qualifications

• 4-5+ years of relevant penetration testing experience.
• US Citizenship or Green Card holder.
• Ability to travel to client locations as required.

Education & Certification Requirements

Preferred Certifications:

• OSCP – Offensive Security Certified Professional
• CPSA – CREST Practitioner Security Analyst
• CRT – CREST Registered Tester
• CRTO – Certified Red Team Operator
• CRTP – Certified Red Team Professional
• GIAC – Global Information Assurance Certification

What Does ControlCase Offer?

At ControlCase, we are committed to supporting our employees’ success and well-being. We offer a comprehensive benefits package designed to promote work-life balance, professional growth, and the opportunity to collaborate with an international team.

Employee Benefits

• Company-Provided Equipment: Essential tools, including a computer, to support your work.
• 401(k) Plan: Competitive retirement savings options.
• Health Insurance: Comprehensive medical coverage for employees and families.
• Dental & Vision Insurance: Access to dental and vision care benefits.
• 100% Company-Paid Life Insurance: Life insurance coverage at no cost to employees.
• Paid Time Off (PTO): Generous vacation time and official holidays.
• Mileage & Travel Reimbursement: Reimbursement for approved business travel expenses.
• Cell Phone & Internet Reimbursement: Monthly reimbursement for communication expenses.
• Employee Assistance Program (EAP): Confidential support services for mental health and personal well-being.
• Flexible Spending Account (FSA): Tax-advantaged healthcare and dependent care savings.
• Employee Discount Program: Access to discounts from participating vendors and partners.

This is a fully remote position, offering flexibility to work from home. You will be part of a dynamic international organization, collaborating with global teams through virtual meetings and communication platforms. The role requires strong self-management skills, the ability to meet deadlines, and a commitment to supporting ControlCase’s global cybersecurity and compliance initiatives.