External Network Penetration Tester

This is a fully remote position, open to applicants in California.

📋 Description

• Execute external network and web application penetration testing along with vulnerability assessments adhering to the NIST SP 800-115 methodology.

• Seek to acquire ePHI, PII, financial information, and confidential communications from external sources while ensuring no disruption to services.

• Record all findings with associated risk ratings, evidence, and suggested remediation strategies for the Assessment report.

• Aim to remain undetected and avoid departmental response efforts throughout the designated testing periods, as outlined.

• Conduct both blind and informed penetration testing on internet-facing assets, which includes web applications, firewalls, remote access (VPN/RDP), and online postings, for all 47 County departments.

⛳️ Requirements

• 4+ years of practical experience in external network and web application penetration testing.

• Proficient in industry-standard tools such as Burp Suite, Nmap, Metasploit, or similar.

• Solid understanding of the OWASP Top 10 and prevalent network attack vectors.

• Must reside within the continental United States.

• Preferred qualifications include OSCP, GPEN, GWAPT, or CEH certification.

• Preferred: Experience in testing environments within the government or healthcare sectors.

🏝️ Benefits

• Fully remote work arrangement.

• Contract employment.