Penetration Tester

Develop penetration-test plans and rules of engagement. Perform authorized, risk-based penetration testing. Conduct controlled exploitation and vulnerability validation. Assess network, application, infrastructure, and cloud security as applicable. Document vulnerabilities, risk, impact, and evidence. Develop remediation recommendations. Perform remediation validation and retesting. Prepare penetration-testing reports and supporting evidence.

5+ years of penetration-testing or security-validation experience. Experience with vulnerability assessment and controlled exploitation. Knowledge of OWASP, NIST, PTES, or comparable methodologies. Preferred: OSCP, OSCE, GPEN, GWAPT, or CISSP.