Penetration Tester

Company: Modis
Location: Syracuse
Posted on: February 23, 2021

Job Description:

PENETRATION TESTERDuties:

• Plan, communicate, coordinate and perform penetration testing, application testing, and security assessments at application, system and enterprise level.
• Develop Rules of Engagement, scoping documents and reports.
• Perform manual penetration tests and validation of vulnerability scan results.
• Develops automation/scripts for replicating vulnerability validation and penetration tests.
• Devises plans and scenarios for various types of penetration tests.
• Documents vulnerabilities, relevant exploits, and remediations in final vulnerability assessment report.
• Perform information technology security research to remain current on emerging technology trends and develop exploits for disclosed and undisclosed vulnerabilities.
• Contributes to developing and implementing tools for penetration testing and early warning of weaknesses or possible incidents building on methodologies as promulgated by NIST, ISO, etc. to ensure useful, measurable, and repeatable methods applied to quantifying risk.
• Selects, installs, and configures security testing platforms and tools or develop tools and procedures for penetration tests.
• Performs penetration testing using standard penetration tools (Metasploit, Nmap, Nessus, Burp Suite, etc.).
• Performs off-hours work as necessary.Required Skills:
  • 3-5 years of penetration testing experience is required
  • 4+ years of network or system security
  • Experience with web and mobile applications, databases, operating systems
  • Experience with utilizing penetration testing framework such as OWASP or Mitre Attack Framework.
  • Experience with FISMA / PCI-DSS compliance, ISO 27000 / NIST SP 800 Frameworks
  • 4+ years of network or system security
  • Excellent communication and interpersonal skills
  • Hands-on OS configuration/administration experience
  • Programming experience with focus on penetration testing or process automation
  • Experience with the following technologies: Kali Linux, Metasploit and NmapDesired Skills:
    • Experience with regulatory compliance, policy development, and policy enforcement
    • Experience with regulatory compliance, policy development, and policy enforcement
    • Experience with cyber security development projects and programs for U.S. Government and/or commercial clients
    • Experience with process development and deployment
    • Experience with the following technologies: Nessus, Tenable Security Center, HP Fortify, IBM AppScan, Web Inspect
    • Experience with three or more of the following: Security COTS integration, Operating System Hardening, Vulnerability Assessment testing, Identification and Authentication schemes, Public Key Infrastructure and Identity Management, Cross Domain Solutions, Reverse Engineering
      Desired Certifications:
      Highly Desired: OSCP
      Desired: OSCE/OSWE, GPEN, GWAPT, CISSP, CEH
      --- Required Education: BA/BS in computer science, information security, or a related field or equivalent experience.

Keywords: Modis, Syracuse , Penetration Tester, IT / Software / Systems , Syracuse, New York