Senior Penetration Tester

• Performing penetration tests against internal and/or external environment of different organizations including network, servers, workstations, applications, API and online/cloud services.
• Evaluating and attempting to bypass the organization’s current information security controls.
• Conduct network and application vulnerability assessments.
• Write reports including technical details, risk analysis and providing remediation recommendations for identified issues.
• Participate in project related meetings: information gathering, solution design, project checkpoints and
• Serve as subject matter expert in areas of network security, application security, and attack and defense techniques and countermeasures.

• Must have a minimum of 7+ years of experience as a network and application penetration tester.
• Have OSCP/OSCE, CREST, GPEN, CEH, or equivalent certification.
• University Degree or College Diploma in Computer Sciences, Information Technology or a related field or equivalent combination of education and experience.

Preferred Skills and Expertise

• Demonstrated experience (minimum 5-10 years) in performing hands-on penetration tests against external and internal networks, operating systems, web applications and more.
• Demonstrated experience running and managing network and application vulnerability scanning and assessment tools.
• Demonstrated technical knowledge of current vulnerabilities, exploits and tools (commercial and open source).
• Extensive technical knowledge of security industry best practices and procedures.
• Demonstrated experience with security assessment frameworks and procedures, including following industry best practice methodologies for penetration testing and the ability to perform both manual and automated testing.
• Experience in researching evolving exploits, techniques, and tools in support of penetration testing efforts.
• Experience in developing security tools, using scripts and utilities to automate assessment and analysis activities
• Experienced in sustaining a penetration test target rich lab environment to serve as a training environment and an environment in which to develop and test new advanced exploits.
• Experience in assisting in the sustainment of an up to dated penetration testing toolbox.

Soft Skills

• Excellent verbal and written communication skills including the ability to write clear and concise assessment reports that include of findings, recommendations, road maps, and actionable plans.
• Exceptional customer service, communication and interpersonal skills.
• Ability to communicate and work closely with executives, peers and employees at all levels.
• Ability and willingness to work outside of business hours (weekends/evenings)
• Strong time management and organizational
• High degree of integrity, competence, adaptability, resilience and initiative.
• Maintain relevant industry certifications and demonstrate a willingness to work toward additional credentials., * Experience testing mobile applications, social engineering, phishing, vishing, physical security, wireless networks, and more.
• Consulting experience leveraging offensive methodologies during red and blue team penetration testing.
• Experience with curating technical and non-technical documentation with reference to internal processes, procedures and.
• Knowledge of security compliance policy, programs, processes, and metrics.
• Researching and learning about information security trends, new testing techniques, and best practices, and knowledge sharing with the team.
• Professional offensive security certifications including OSWE, OSCE are beneficial.

Penetration Testing certifications such as:

• GIAC security certifications (GPEN, GWAPT, GXPN)
• Qualified/Licensed Penetration Tester (Q/LPT)
• Certified Penetration Tester (CPT)
• CompTIA Certified Ethical Hacker (CEH)

General Cybersecurity certifications such as:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified Risk Management Professional (CRMP)
• Certified in Risk and Information Systems Control (CRISC)
• Information Systems Security Management Professional (ISSMP)

• 401(k)
• Dental insurance
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Professional development assistance
• Referral program
• Retirement plan
• Vision insurance