Job details
Job type full-time
Full job description
Focal point data risk, a cdw company, is one that delivers a unified approach to addressing data risk through a unique combination of consulting service offeringsFocal point has brought together industry-leading expertise in cyber security, identity governance and access management, data privacy and analytics, internal audit, and hands-on training services, giving companies everything, they need to plan and develop effective risk and security programsBy integrating these services, we provide our clients with the flexible support they need to protect and leverage data across any part of their organizationSimply put, cdw-focal point is the next generation of risk management.
The ideal hire will possess a broad skill set and have the capacity for learning required to sustain our client engagementsThe responsibilities that you will be given will make the most of your strengths and challenge you to develop even further in a supportive, team-focused atmosphere.
What you will get to do:
Configure, run, and monitor automated security testing tools
Perform manual validation of vulnerabilities
Perform manual penetration testing of client systems, web sites, and networks to identify and exploit vulnerabilities
Thoroughly document exploit chain/proof of concept scenarios for client consumption
Work successfully from home office environment
Perform overnight work as necessary (less than 10%)
Work onsite and at client locations as necessary
Minimum qualifications:
1+ years of experience with vulnerability assessment and penetration best practices
1+ years of experience with vulnerability and penetration testing techniques and tools
1+ years of experience with programming experience in python, php, perl, ruby, .net, or other interpreted or compiled languages
Ability to travel up to 10%
Ability to perform overnight work as necessary (less than 10%)
1+ years of experience and/or detailed knowledge of one or more of the following technologies:
Security testing tools including metasploit, nmap, nessus, burp suite, or equivalents
Linux operating systems
Microsoft technologies
Mobile application programming and/or security testing
Wireless technologies
Web application technologies
Network implementation (operational and security)
Telephony technologies (analog and ip)
Social engineering
Physical security
Source code analysis software
Intermediate to advanced microsoft office suite (i.e., word, excel, powerpoint)
Preferred qualifications:
2+ years of hands-on penetration testing experience
Currently has or desires to obtain one or more security-related certifications, including but not limited to:
Certified information systems security professional (cissp)
Giac penetration tester (gpen)
Giac certified incident handler (gceh)
Offensive security certified exert (osce)
Offensive security certified professional (oscp)
