Penetration Tester

📋 Description

• Conduct comprehensive penetration testing on hardware, software, and network components.
• Perform advanced vulnerability scanning and assessments on all components.
• Cybersecurity evaluation of the product under test to identify vulnerabilities that would negatively impact the Confidentiality, Integrity, or Availability of system data or functionality.
• Analyze software, firmware, hardware, and RF components within the system.
• Developing and executing exploits and proof-of-concept (PoC) attacks to demonstrate the impact of identified vulnerabilities.
• Reporting detailed findings, documenting case details, and providing actionable remediation recommendations for security improvements.

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Engineering, or a related field; minimum of 2+ years’ experience in three or more areas to include: intelligence analysis, network engineering, networking security, penetration testing, red team operations, hardware engineering, software engineering, exploit development, reverse engineering, vulnerability assessment, physical security assessments, or social engineering.
• Proficiency with cloud technology and deployments across AWS, Azure, and Google Cloud Platform (GCP); proficiency in testing and assessment of mobile operating systems, embedded systems, and/or IoT devices.
• Experience drafting reports, documenting case details, and summarizing findings and recommendations based on system analysis.
• Experience performing advanced vulnerability scanning and assessments on all components; experience conducting web application security assessments, focusing on OWASP Top Ten vulnerabilities and API security testing.
• Demonstrated strong written and verbal communication skills; strong understanding of NIST 800-53 frameworks; US Citizenship and an active security clearance at a minimum of the Secret Level; Desired: familiarity with NIST 800-171 Revision 2; proven ability to develop and execute complex exploits and PoC attacks; strong analytical skills and experience in firmware, binary exploitation, and embedded systems testing; advanced knowledge of Software Defined Radio (SDR) and protocol reverse engineering; and active certifications such as CEH, OSCP, PNPT, GPEN, or similar security/penetration testing certifications.