Penetration Tester

Description

What you will do You will be responsible for researching new threats, attack vectors and risks.You will be building exploit POCs.You will create afteraction reports documenting results including findings, risk mitigation recommendations, and lessons learned.You will prepare and participate in live security exercises to assess the effectiveness of preventative controls and the ability of the SOC to detect, respond and recover from a security incident.You will document security exercises including the formal plan, execution summary and the afteraction report.You will coordinate with stakeholders (system owners, IT program managers, Network Operations Center personnel, etc) when designing and executing tests and exercisesQualificationsBachelor's degree in related field required.You will have 2 years of professional work experience in IT Security environment, doing penetration testing (preferably in an Enterprise, multiple OS environment)Demonstrable experience creating exploits for vulnerabilities OR one of the following industry certifications relating to penetration testing GXPN, OSCE, OSCP, or OSEEProficiency in at least one of the following frameworks Metasploit, Empire, PowerSploit Maltego, Immunity CanvasAbility to work independently and also collaborate closely with incident responders, SOC analysts, engineers, and othersKnowledge of the latest security threats, techniques, and exploits targeting vulnerabilitiesStrong familiarity with multiple operating systems, databases, applications and platformsUnderstanding of SQL, XSS, CSRF, XXE, and other trends in web exploitationYou are a quicklearn