Job details
Job type full-time
Full job description
Are you an experienced cybersecurity tester looking for an opportunity to test a variety of technologies and platforms? aerstone is seeking a candidate to join a test team that supports security control-based networking, application, mobile, and cloud-based penetration testing, vulnerability assessments and technical assessments.
The position entails leading and conducting technical testing for security control assessments (nist-based) of systems ranging from web application, networks, and mobile on both on-prem and cloud-based platforms.
The candidate will primarily function as this role in support of a multi-year contract that includes testing of ~20 systems a year.
In addition, the candidate will be expected to lead or participate in commercial engagements for penetration testing, vulnerability scanning, or mobile application testing as needed.
Seeking mid-level (5 or more years) and senior level (8 or more years) experience in security testing
Aerstone is a cybersecurity firm based in the d.c area that supports a work-from-home model with team members based anywhere in the united states.
Location:
The majority of testing engagements are remote-based and anticipated travel is estimated at less than 10%.
Aerstone is looking for an experienced penetration tester who can perform and lead testing engagements as well as:
Update and maintain testing standards, tools, and procedures
Provide mentorship, training, and guidance for team members
Support managers and aerstone leadership on new initiatives and opportunities to grow our security testing offerings
The successful candidate will possess:
Experience and skills to perform application penetration testing, internal and external network infrastructure testing
Strong understanding of common web application and network vulnerabilities, exploitation techniques, and remediation options
Strong knowledge of web application tools and the owasp methodologies
Ability to work on multiple engagements and across teams
Preferred skills and knowledge:
Mobile application testing skills and experience with mobile testing platforms
Cloud assessment methodologies, tools and frameworks which may include prowler, cloudsploit, terrascan, etc.
Experience with code review and automated code review platforms and tools
Good communication skills
Familiarity of industry cyber security standards and regulations such as nist (800-53, 800-171 specifically), nist 800-30 (risk determination), pci dss, hipaa
Experience testing web-based apis (i.eRest, soap, xml, json)
Experienced with common penetration testing tools and frameworks (kali linux, metasploit, burp suite / zap, nessus, etc.)
Understanding of internet (http, ftp, etc.) and network (smb, tcp/ip, etc.) protocols
Working knowledge with both windows and unix operating systems
Strong microsoft office skills (word, excel, powerpoint)
Strong written and verbal english language skills
Pci qsa certification a plus
Other tasks may include:
Open source intelligence gathering (osint)
Hardware/firmware testing
Red teaming
Representing the company in formal customer interactions
Coordinating with other cybersecurity teams as necessary
Performing other duties as assigned related to the penetration testing practice
Years of experience required: seeking mid-level (5 or more years) and senior level (8 or more years) experience in security testing
Education requirements: bachelor’s degree
Clearance requirements: ability to gain and maintain an agency public trust clearanceTs clearance a plus.
Desired test certifications:
Oscp, gwapt, gmob and/or gpen (giac), ceh, cpent, lpt master
Cloud certifications of note:
Ccsp (isc2), ccsk or ccak (csa), gcpn (giac), aws cloud practitioner, ms azure fundamentals
About aerstone
Aerstone is a service-disabled veteran-owned small business (sdvosb) with office locations in maryland and northern virginiaAerstone provides work from home opportunities, excellent health benefits, and certification & training opportunities for its employees.
Eeoc:
Equal employment opportunity has been, and will continue to be, a fundamental principle at aerstone, where employment is based upon personal capabilities and qualifications without discrimination because of race, color, religion, sex, age, national origin, familial status, disability, veteran status, sexual orientation, health/genetic information, or any other protected characteristic as established by law.
In compliance with federal eeoc regulations, the selected employee will work on a cleared contract and therefore be required to hold u.sCitizenship.
Job type: full-time
Work location: multiple locations
