Penetration Tester

About the position Conduct testing and analysis to identify vulnerabilities and potential threat vectors in systems and networks, develop exploits, and engineer attack methodologies. Leverage understanding of MITRE ATT&CK and common cybersecurity control implementations to plan and conduct threat-based assessments. Apply advanced advising skills, extensive technical expertise, and full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction, and mentor and supervise team members, as needed. Responsibilities Conduct testing and analysis to identify vulnerabilities and potential threat vectors in systems and networksDevelop exploitsEngineer attack methodologiesPlan and conduct threat-based assessments using MITRE ATT&CK and common cybersecurity control implementationsApply advanced advising skills, extensive technical expertise, and full industry knowledgeDevelop innovative solutions to complex problemsWork without considerable directionMentor and supervise team members, as neededRequirements 3+ years of experience with MITRE ATT&CK, test planning and security control assessment3+ years of experience with cyber penetration testing or developing risk and threat mitigation plans3+ years of experience operating in Linux, Windows, and virtual platforms3+ years of experience with computer attack methods and system exploitation techniques3+ years of experience leveraging adversarial tactics to conduct hands-on security testing3+ years of experience performing network security analysis, including software or traffic analysisSecret clearanceHS diploma or GEDNice-to-haves Experience with Breach and Attack Simulation tools such as Atomic Red Team, Scythe, Mandiant ASV or AttackIQExperience manually auditing source code, including Java, Ruby, Python, JavaScript, Rust, or C, to find security issuesExperience with system security engineering and security architectureKnowledge of tools, tactics, and techniques targeting Artificial Intelligence (AI) systems and their ecosystemsBachelor's degree in CS, Information Systems, Engineering, or a related fieldOffensive Security Certified Professional (OSCP), HTB Certified Penetration Tester Specialist (CPTS), eLearnSecurity Junior Penetration Tester (EJPT), GIAC Global Information Assurance Penetration Tester (GPEN), or GIAC Cloud Penetration Tester CertificationBenefits health, life, disability, financial, and retirement benefitspaid leaveprofessional developmenttuition assistancework-life programsdependent carerecognition awards program