Internal Network Penetration Tester

Executes internal network penetration testing from two pre-determined footholds - an unauthenticated physical network port and a simulated-phishing authenticated workstation - across County facilities, testing servers, workstations, endpoints, and password strength., * Physically connect to County network ports to simulate an unauthenticated internal attacker.

• Simulate a successful phishing/Trojan compromise from an authenticated workstation foothold.
• Attempt password cracking and lateral movement while evading department detection and response efforts.
• Document internal attack paths, exploited vulnerabilities, and business impact for each department report.

• 4+ years of internal/network penetration testing experience, including Active Directory attack paths.
• Comfort working onsite at client facilities, including data centers and administrative offices.
• Experience with internal recon and lateral movement tooling (BloodHound, Responder, or equivalent).

Preferred Qualifications

• OSCP or GPEN certification.
• Experience testing in HIPAA-regulated or government network environments.