Technical Tester

This is a fully remote position, open to applicants in Florida.

📋 Description

• Implement approved cybersecurity testing protocols exactly as specified.

• Record any deviations, interruptions, or anomalies encountered during testing.

• Conduct vulnerability scans, configuration assessments, control validations, and cloud security evaluations.

• Carry out controlled adversary simulation procedures, privilege escalation evaluations, and access control verifications.

• Collect and maintain technical evidence with synchronized timestamps for audit purposes.

• Compile testing documentation and evidence packages for quality assurance review.

• Perform verification testing for remediation and document outcomes against initial findings.

• Analyze logs and monitoring activities to assist in testing and validation of detection mechanisms.

• Report any unusual or unexpected system behavior in accordance with established stop-work protocols.

• Collaborate with technical leads, cybersecurity subject matter experts (SMEs), and government stakeholders across various testing environments.

• Provide updates to the Project Manager, receiving daily technical guidance from the Deputy Project Manager/Technical Lead and Senior SMEs.

⛳️ Requirements

• Must be a resident of the state of Florida.

• 5+ years of experience in conducting technical security assessments, vulnerability testing, or cybersecurity operations.

• Proven experience in producing technical documentation that meets audit or compliance standards.

• Experience adhering to written procedures under supervision in production settings.

• Certification required upon hire: CEH, CISA, or CISSP.

• Practical experience with vulnerability scanning, control validations, log analysis, configuration reviews, and cloud security assessments.

• Experience executing controlled adversary simulations, privilege escalation tests, access control validations, and effectiveness monitoring reviews.

• Proficient in Nessus, OpenVAS, Burp Suite, BloodHound, Kali Linux, Wazuh, Elastic Stack, Wireshark, and Nmap.

• Familiarity with Active Directory, Microsoft Defender, Microsoft Entra ID, and Microsoft Sentinel.

• Proficiency in scripting languages such as PowerShell, Python, or Bash.

• Capability to gather and preserve technical evidence suitable for audit evaluation.

• Experience conducting assessments on endpoints, servers, databases, and network devices.

• Knowledge of vulnerability scoring, risk prioritization, and remediation verification processes.

• Ability to develop comprehensive testing documentation and technical evidence packages.

• Understanding of NIST CSF and relevant state cybersecurity technical requirements, including Rule 60GG-2, F.A.C.

• Preferred certifications include Security+, GSEC, PenTest+, GPEN, CySA+, OSCP, SC-200, Certified Red Team Operator, or cloud security certifications.

• Preferred experience in supporting government audit or oversight activities.

• Preferred experience with Atomic Red Team or MITRE CALDERA.

🏝️ Benefits

• Opportunity to take initiative and work closely with clients and leadership.

• Contribute to significant governmental missions.

• Make a direct impact within a growing organization.

• Remote work available for candidates based in Florida.