Junior Penetration Tester

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Execute and lead penetration testing to evaluate customer systems.

• Perform vulnerability assessments and penetration tests on information systems.

• Identify vulnerabilities and propose remediation strategies that meet mandated NIST SP 800-53 security controls.

• Assess vulnerabilities and conduct root cause analysis utilizing NIST SP 800-115, PTES, ISSAF, and OWASP WSTG frameworks.

• Communicate and demonstrate findings to system owners and engineers.

• Manage the Red Cell infrastructure.

• Create or adapt tools that automate the processes of discovery or exploitation.

• Utilize knowledge of computer and network forensics in testing activities.

• Stay updated and proficient in tools, techniques, countermeasures, and trends related to computer and network vulnerabilities, data concealment, and encryption.

• Formulate testing methodologies and deliver solutions across various complex projects.

• Contribute to program deliverables and performance metrics.

• Assist a federal customer's cybersecurity risk management program.

⛳️ Requirements

• Bachelor's degree in Cybersecurity, Information Security, Information Systems, Information Assurance, Computer Science, Engineering, Business Administration, or a related field.

• An industry-recognized professional certification such as CCNA Cyber Ops, CCNA Security, CEH, CFR, CompTIA Cloud+, CySA+, GCIA, GCIH, GICSP, SCYBER, Security+ CE, or SSCP.

• Between 3 to 5 years of experience in penetration testing.

• Ability to obtain and maintain a Public Trust clearance.

• U.S. citizenship is necessary to secure the required clearance.

• Proven experience with Kali Linux.

• Demonstrated proficiency with penetration testing tools, including Nmap, Burp Suite, and Metasploit.

• Proven ability to assess vulnerabilities, conduct root cause analysis, and report findings using NIST SP 800-115, PTES, ISSAF, and OWASP WSTG.

• Capacity to clearly explain and demonstrate technical findings to system owners and engineers.

• Working knowledge of NIST SP 800-53 security controls.

• Ability to maintain a quiet and distraction-free remote workspace with reliable internet access.

• Flexibility to align working hours with the core business hours of colleagues and clients.

• Required to disclose and obtain written approval for any current or future outside employment or professional engagements.

🏝️ Benefits

• A selection of medical plans, ranging from an affordable HSA option to a comprehensive PPO, with generous contributions from the company.

• Dental and vision coverage available for you and your family.

• Company-paid life insurance, as well as short-term and long-term disability insurance.

• Optional supplemental life, accident, and critical illness insurance.

• 401(k) retirement plan with company matching.

• Paid time off that increases with years of service.

• Paid federal holidays.

• Financial support for certifications.

• Opportunities for professional development.

• Access to the Valiant University training portal.

• Flexible spending accounts.

• Wellness and fitness programs.

• Referral bonuses.

• 100% remote work environment.

• Occasional travel to the Washington DC Metro area.

• Quiet, distraction-free workspace and reliable internet for telecommuting.

• Core business hours synchronized with colleagues and clients.

• Use of cameras is encouraged and may be required during virtual video conferences.