You must have an active TOP SECRET LEVEL SECURITY CLEARANCE to be considered for this role.
We are currently seeking a skilled Penetration Tester with a Top Secret Level Security Clearance to join our team on a remote, part-time contract with one of our esteemed government clients. In this role, you will play a crucial part in assessing and enhancing the security posture of our client's systems and networks through internal and external ethical hacking, along with reviewing their process for their vulnerability assessments.
Responsibilities:
- Schedule and hold a preliminary planning meeting with the client to discuss their defined audit scope for the penetration test, testing and reporting guidelines, information security policies and procedures, and logistics information.
- Schedule and hold entrance meeting with the client to discuss questions, testing, RoE constraints, tools, systems to be tested, and then update any parameters with information provided by the client.
- Conduct ~8 black and white box penetration testing on several information technology systems within the client's ecosystem to identify methods of gaining access to a system by using tools and techniques that attackers use. Perform the penetration and vulnerability testing in accordance with client's defined audit scope, testing and reporting guidelines, information security policies and procedures, and agreed upon RoE parameters.
- Prepare finalized RoE with acceptance from the client, employer, and any third-party organization(s), if applicable (e.g. cloud service provider).
- Assess how the client conducts vulnerability assessments and review the quality of the scanning tools that the client is currently using for vulnerability assessments and determine whether the vulnerability assessments conducted by the client includes industry standard requirements.
- Report findings of client's vulnerability assessment process.
- Stay current on emerging threats, vulnerabilities, and industry best practices in cybersecurity and provide expertise and guidance on security best practices to enhance overall security posture.
- Must be available throughout length of contract start and end date (September 2024 - May 2025) to schedule testing and report submission.
Requirements: TOP SECRET LEVEL SECURITY CLEARANCE; Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
- 10+ years experience in penetration testing, ethical hacking, or related cybersecurity roles.
- No previous experience working for an Intelligence Agency in the past 10 years.
- Strong understanding of cybersecurity principles, methodologies, and technologies.
- Hands-on experience with penetration testing tools and techniques, such as Metasploit, Wireshark, and Nmap.
- Ability to perform penetration tests using own tools and hardware
- Effective communication skills, both verbal and written, to convey technical concepts to non-technical stakeholders.
- Must have (1) of Certified Ethical Hacker (CEH), CISSP, CISA, CISM, NSA Cyber Red Team, Offensive Security Certified Professional (OSCP), Certified Red Team Operator, or GIAC Penetration Tester (GPEN) certification.
Contract Details: This position is a Short-term Part Time Contract hire. If you are a talented Penetration Tester seeking a remote opportunity to contribute to critical cybersecurity initiatives, we invite you to apply! Join DotWave Solutions and help shape the future of cybersecurity.
DotWave Solutions is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.