Penetration Tester

US Citizen: This role requires the ability to obtain a low-level (Public Trust) US security clearance, which requires a thorough background search and US citizenship. Residency requirements may apply.

Penetration Tester typically spends the day planning and executing security tests against applications, systems, and infrastructure to uncover vulnerabilities before attackers do.

• Much of the work involves using Linux-based environments and tools such as Burp Suite, Metasploit, and Nessus to perform web application testing, vulnerability scanning, exploitation validation, and manual verification of findings.
• Review scope, analyze prior results, run scans, investigate weaknesses, and document evidence to determine real-world risk.

• Highly motivated senior cybersecurity practitioners who bring deep hands-on experience in penetration testing, assessment, threat hunting, forensics, and security operations.
• Works closely together to support ongoing security testing initiatives, validate risk across applications and infrastructure, and help strengthen the organization’s overall security posture.
• Openly sharing intelligence, techniques, and findings and actively supporting one another in solving complex security problems.

Required technology:

• Linux
• Penetration testing tools (e.g., BurbSuite, MetaSploit, Nessus)
• Ability to perform manual testing against applications, systems, and infrastructure
• Hands-on Penetration Testing Expertise
• Ability to validate, exploit, or explain the findings
• Ability to distinguish false positives from legitimate security weaknesses or assess real-world risk

Soft skills:

• Strong verbal and written communication skills, with the ability to clearly explain security findings to both technical teams and non-technical stakeholders.
• Ability to translate complex vulnerabilities into business-relevant risk and provide practical, understandable remediation guidance.
• Ability to document findings thoroughly, accurately, and in a polished manner suitable for reports and stakeholder communication.

Required work experience:

• 8 years of job-related technical experience.

Required education/equivalencies:

• Bachelor’s degree in Computer Science, Information Technology, or other job-related degree;
• Associates degree in CS, IT, or other job-related degree plus 2 years of work-related experience;
• 4 years job-related work experience (total 12 years without a degree)