Penetration Tester

The Penetration Testing Specialist / Information Security Analyst Journeyman is responsible for conducting thorough penetration tests and vulnerability assessments to identify and exploit security weaknesses. This role involves hands-on testing, validating findings, documenting results, and supporting retesting efforts to enhance organizational security posture. Responsibilities:

• Execute network scanning to identify vulnerabilities.
• Conduct web application penetration testing.
• Perform vulnerability exploitation to validate security gaps.
• Validate and document findings from penetration tests.
• Support data exfiltration testing to assess data leakage risks.
• Create detailed technical documentation and capture evidence such as screenshots.
• Assist in retesting activities to verify remediation effectiveness.

• Bachelor's Degree or equivalent experience.
• Minimum of 3 years penetration testing experience.
• Proficiency with security assessment tools including Nessus, Burp Suite, Metasploit, Nmap, Wireshark, Kali Linux.
• Familiarity with OWASP Testing Framework.

• Security+ certification.
• CEH (Certified Ethical Hacker) certification.
• PNP (Penetration Testing Professional) certification.
• TeJPT (Test of Java Penetration Testing) certification.
• GPEN (GIAC Penetration Tester) certification.

• May require handling sensitive and confidential information securely.
• Must follow strict protocols for evidence capture and documentation.

• Standard work schedule with potential for on-call or flexible hours depending on testing requirements.