External Network Penetration Tester

This is a fully remote position, open to applicants in California.

📋 Description

• Execute external network and web application penetration testing as well as vulnerability assessments following the NIST SP 800-115 methodology.

• Aim to acquire ePHI, PII, financial information, and confidential communications from external sources while ensuring no disruption to services.

• Record all findings, including risk ratings, evidence, and remediation suggestions for the Assessment report.

• Strive to remain undetected and avoid department response efforts during designated testing periods, as outlined.

• Carry out both blind and informed penetration testing against internet-facing assets, such as web applications, firewalls, remote access (VPN/RDP), and internet postings, for all 47 County departments.

⛳️ Requirements

• A minimum of 4 years of practical experience in external network and web application penetration testing.

• Proficiency in using industry-standard tools (Burp Suite, Nmap, Metasploit, or similar).

• Solid understanding of the OWASP Top 10 and prevalent network attack vectors.

• Must be located within the continental United States.

• Preferred qualifications include OSCP, GPEN, GWAPT, or CEH certification.

• Preferred experience in testing within government or healthcare-sector environments.

🏝️ Benefits

• Fully remote work arrangement.

• Contract employment.