Posted in

Pen Test Operator

Pen Test Operator

CompanyGuidehouse
LocationWashington, DC, USA, Beltsville, MD, USA
Salary$113000 – $188000
TypeFull-Time
DegreesBachelor’s
Experience LevelMid Level, Senior

Requirements

  • An ACTIVE and MAINTAINED SECRET Federal or DoD security clearance
  • Bachelor’s degree
  • THREE or more years’ experience relevant to Penetration Testing or IT Systems Configuration or Risk and Vulnerability Assessment or Cybersecurity and/or IT Technology Consulting

Responsibilities

  • Conduct penetration testing activities on High Value Asset (HVA) systems
  • Perform network mapping and reconnaissance, documenting Rules of Engagement to guide the scope, developing test plan, and assisting with acquiring management approval
  • Conduct a variety of penetration tests based on system’s criticality, test objectives, and organization’s requirements
  • Work with IT personnel to define scope for targeted testing
  • Mimic an outside attacker to gain access to system and what information can be accessed
  • Mimic an insider attack to determine risk employees with various access levels pose to the organization
  • Focus testing activity towards accessing specific target datasets
  • Analyze test results, develop a report on discovered vulnerabilities, and provide risk-based recommendations to remediate those vulnerabilities

Preferred Qualifications

  • An ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance
  • Master’s Degree preferred
  • CISA AES HVA Assessment certification with proof of certification as a CISA-AES HVA Pen Test Operator
  • Experience supporting US government cybersecurity programs
  • CISSP or CISM
  • Experience managing direct client engagement team to deliver impactful support to Federal clients
  • Experience with managing/supporting and/or knowledge of cybersecurity or HVA Program
  • One of the following certifications: Offensive Security Certified Professional (OSCP) or GIAC Penetration Tester (GPEN) or Certified Ethical Hacker (CEH) Certification
  • Experience conducting HVA assessment or performing Risk and Vulnerability Assessments
  • Knowledge of Cybersecurity Framework, Risk Management, NIST 800-83 Rev 5
  • Experience developing and maintaining working relationships while serving Federal clients onsite
  • Ability to identify obstacles and opportunities that impact the success of plans or initiatives
  • Excellent oral and written communication and presentation skills
  • Ability to communicate effectively and demonstrate leadership when interacting with clients and fellow team members