Description
We are seeking a skilled Penetration Tester to join our team in Huntsville, AL. As a Penetration Tester, you will perform live penetration tests for customers, conduct deep-dive preparatory analysis for systems under test, recommend mitigation strategies for discovered vulnerabilities, and test at multiple stages of the system development/acquisition lifecycle.
Primary Responsibilities:
- Perform live penetration tests for customers
- Conduct deep-dive preparatory analysis for systems under test
- Recommend specific mitigation strategies to customers for discovered vulnerabilities
- Test at multiple stages of the system development/acquisition lifecycle
- Develop red team tools for use in stand-alone and network-connected systems
- Ensure survivability and resiliency of customer systems under test
- Deliver development updates and after-action reports after each assessment
Required Qualifications:
- Bachelor's degree in Cyber Security, Computer Science, Computer Engineering, Electrical Engineering, or related Technical Degree
- 4-8 years of experience in penetration testing/red teams or related security field, or a master's degree in a related field with 2+ years of experience
- Proficient with Linux (preferably Kali, Parrot, or similar distros) and Windows Operating systems
- Experience with scripting languages such as bash, python, etc.
- Hands-on experience performing penetration tests, vulnerability assessments, and security analysis on enterprise systems
- Proven experience with web application penetration testing, including OWASP Top 10 vulnerabilities
- Experience conducting cloud security assessments (AWS, Azure, GCP) and cloud-native penetration testing
- Familiarity with API security testing (REST, SOAP, GraphQL) and authentication/authorization mechanisms
- Strong understanding of TCP/IP network architecture, protocols, and network security concepts
- Located in Huntsville, AL area or willing to relocate
- US Citizen with ability to obtain TS/SCI security clearance
Preferred Qualifications:
- Extensive experience with reconnaissance and scanning tools (Nmap, Nikto, Burp Suite, OWASP ZAP, etc.)
- Extensive experience with exploitation frameworks and tools (Metasploit, Cobalt Strike, Empire, etc.)
- Demonstrated ability to develop custom exploits and automation scripts using Python, Bash, PowerShell, or similar languages
- Experience with cloud security tools and methodologies (ScoutSuite, Prowler, Pacu, etc.)
- Prior Department of War (DoW) experience or work with government/defense sector clients
- Completion of or active pursuit of industry certifications such as OSCP, GPEN, GWAPT, GCIH, GSEC, CPTS, CEH, or equivalent technical certifications
- RF security experience or amateur (HAM) radio certification is a plus
Benefits:
- Competitive benefits package including Paid Time Off, 11 paid Holidays, 401K with 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and more