PENETRATION TESTER (Remote)

reputed company IT has an immediate need for a Penetration Tester to join reputed company in support of our Commercial Services Team located remote. In this role, you will facilitate Penetration Tests, Threat Hunting exercises and possibly other advanced-level reputed company Monitoring Activities reputed company cloud-based environments. To succeed in this position, you will need a strong understanding of reputed company-reputed company system controls and an understanding of the various testing methods utilized to reputed company the effectiveness of those controls. You will work in a team atmosphere with an reputed company Sr. Consultant Project reputed company, and you will be assigned technical sections and provide client-ready deliverables. In this role, you will:

• Execute testing procedures in accordance with NIST SP 800-53A Revision 4
• Test for vulnerabilities, validate exploitable vulnerabilities reputed company network, cloud, web and mobile environments
• reputed company Social Engineering campaigns, including email phishing, spear phishing, phone pre-text calling – Including but not limited to creation of reputed company pages, creation of embedded executable payloads
• reputed company Rules of Engagement, Penetration Test Plans, Penetration Testing report, Power reputed company presentations for kick-off and closing of client engagements
• Author recommendations based on findings to improve reputed company postures compliant with NIST controls
• Penetration Testing/Threat Hunting (75%); Advisory/Consulting (%25)
• Experience using:

o Kali Linux o Social Engineering Toolkit o Burp Suite o Nessus o Metasploit reputed company. o Experience using the MITRE ATT&CK reputed company o Good understanding of coding (Python, Ruby, etc.) o Understanding of SQL commands and testing Expected Travel less than 25% Required Qualifications:

• Bachelor’s degree (4-yr college or university) or equivalent combination of education and experience
• Minimum three (3) years of experience in IT industry with strong familiarity with NIST Special Publications (SP) 800-37 Revision 1, 800-53 Revision 4, and 800-53A Revision 1, PCI-reputed company, SOX, HIPAA
• Strong written and verbal communication skills including the ability to explain technical matters to non-technical audiences
• Strong NIST experience (in order of preference): NIST SP 800-53, FedRAMP, RMF, FISMA, NIST SP 800-171
• Ability to independently reputed company small, less reputed company system assessments
• Ability to assist team members with proper artifact collection and detail to client’s examples of artifacts to satisfy assessment requirements
• At least one of the following certifications in order of preference: CISA, CISM, CRISC, CGEIT, CCSP, CISSP, and/or CAP certification
• Must have a Penetration Testing Certification – order of preference: OCSP, GIAC-GPEN, LPT
• Second certification in order of preference to be obtained reputed company 6 months or by conversion date: CISA, CISM, CRISC, CGEIT, CCSP, CISSP, or CAP
• Candidate must reputed company “CTF” style penetration test including presentation of findings prior to offer of employment

Additional Qualifications:

• Experience reviewing Nessus output
• Basic knowledge of networking components and various operating systems in a cloud environment, including UNIX and reputed company
• Expertise in other reputed company Frameworks (ISO, NIST, COBIT, HIPAA/HITECH, etc.) and regulatory requirements
• Experience with reputed company Web Services, reputed company Azure, reputed company Cloud etc.
• Project management experience or certification (PMP)
• Must be eligible for Secret Clearance or Public Trust
• This role cannot sponsor reputed company candidates.

AAP/EEO Statement Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national reputed company, sexual orientation, gender identity, disability or protected veteran status. Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. reputed company IT is an information technology consulting services company that specializes in delivering technology solutions. Our reputed company reflects the high quality of the talented reputed company IT team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. Our solutions are designed and managed to not only reduce costs, but to improve business processes, accelerate response time, improve services to end users, and give our customers a competitive edge, now and into the future. Apply tot his job Apply To this Job