Job details
Job type full-time number of hires for this role 1
Full job description
Job title: cyber security penetration testing specialist
Job function: technical assessor
Location: offsite/remote
Duration: full-time (with limited benefits)
Clearance: doe q or ts/sci
About the employer: unwin company is a respected federal government contractor supporting the department of energy (doe) with a long-standing tradition of service and professionalismUnwin company offers a very competitive compensation package that includes eligibility to participate in a company matching retirement savings plan and group medical insurance.
Job responsibilities:
The cyber security penetration tester specialist will assist the department of energy (doe) in monitoring and assessing the technical performance of the department`s cybersecurity programsThis position will lead and participate in comprehensive cybersecurity vulnerability and penetration testing assessments, creation of assessment reports, and presenting the assessment results to senior managementThe successful candidate will work closely with team members assessing the policy and procedures implemented throughout the department to meet federal information security modernization act (fisma) requirementsPenetration tester specialists also provide additional technical support, develop new assessment methodologies, and take on special projects in support of the assessment process.
Other duties and responsibilities:
· plan, execute, and lead technical cybersecurity assessments across the department
· evaluate the performance of cybersecurity programs from a technical perspective
· apply advanced technical methods to test and validate technical security controls
· conduct subject matter expert interviews in order to develop an understanding of the current implementation of cybersecurity policies, procedures, and risks to the department
· assess the exposures resulting from ineffective or missing security controls
· apply industry standards and best practices including the open source security testing methodology manual (osstmm) and the mitre adversarial tactics, techniques, and common knowledge (att&ck) framework along with open web application security project (owasp)
· provide written and verbal reports of assessment results
· develop rigorous “best practice” recommendations to improve cybersecurity on all levels
· develop assessment findings and prepare assessment reports
· other duties as specified by manager or organization
Position requirements:
· applicant must possess at least a bachelor’s degree from an accredited university or college, in such fields as an engineering discipline, business administration, security management, computer science, or information management, or an equivalent combination of education, certifications and experience
· applicant must have at least 5 years of direct experience in network security, web application testing, vulnerability assessment, or penetration testing
· applicant must demonstrate detailed knowledge in one or more of the following areas: networking, windows and unix/linux operating systems, active directory, and command line interfaces to include powershell and bash
· applicant must have advanced level knowledge of web application vulnerabilities and web application penetration testing
· applicant must have familiarity with a broad range of tools and techniques for network scanning, penetration testing, adversary emulation, and red teaming
· applicant must have a demonstrated ability to develop reports and presentations (verbal and written) that are understandable to a wide range of audiences
· the position requires an individual with a proven ability to meet deadlines and perform under pressure in an uncertain environment
· applicant must be willing and able to work well as a part of a team
Desired skills, knowledge and abilities:
· national level recognition in the area of penetration testing, to include presentations at conferences and technical publications
· a solid understanding of the mission of the doe
· demonstrated ability to help line management identify solutions to complex problems
· possess one or more nationally recognized certifications
· experience with programming, coding, or scripting in order to deliver advanced and more efficient penetration tests
To apply: for consideration please submit your cover letter and resume with salary requirements.
Job type: full-time
Benefits:
401(k)
401(k) matching
Health insurance
Paid time off
Schedule:
8 hour shift
Work location:
One location
Work remotely:
Yes
Work location: one location
