Senior Penetration Tester

Overview

Please note that this position is contingent upon the successful award of a contract currently under bid.


Global in service but local in approach, Nisga'a Tek is committed to high-quality service to those who defend us. Nisga'a Tek ensures mission assurance and execution for customers and warfighters. Providing intelligence, IT, cyber security, training, logistics, administrative, acquisition, and background investigation services.


Summary:

The Senior Penetration Tester will independently perform penetration testing of applications, systems and enclaves Identifies security flaws in computing platforms and applications and devise strategies and techniques to mitigate identified cybersecurity risks.


Responsibilities

Essential Job Functions:

• Performs application and network penetration testing and wireless security assessments.
• Applies offensive cybersecurity testing techniques, coordinate testing projects with internal and external system owners.
• Reports the nature of identified cybersecurity risks and recommends risk mitigation measures to improve the cybersecurity posture of the enterprise.

Qualifications

Necessary Skills and Knowledge:

• Knowledge of TCP/IP protocols and networking architectures
• Excellent written documentation and oral presentation skills
• Knowledge of open security testing standards and projects, including OWASP
• Knowledge of databases, applications, and Web server design and implementation
• Possess oral and written communication skills

Minimum Qualifications:

• Minimum six (6) years proven proficiency in performing extensive vulnerability assessment and penetration testing
• Minimum three (3) years of experience with testing tools, including NESSUS, METASPLOIT, CANVAS, NMAP, Burp Suite, and Kismet
• Minimum three (3) years of experience with network vulnerability assessments and penetration testing methods
• Minimum three (3) years of experience with writing testing assessment reports
• Minimum two (2) years of experience with using, administering, and troubleshooting a WINDOWS Server, IIS
• Minimum two (2) years of experience with using, administering, and troubleshooting a major version of Linux
• Minimum two (2) years of experience PCI DSS testing
• Possess a certification in penetration testing, such as:
  • Licensed Penetration Tester (LPT)
  • Certified Expert Penetration Tester (CEPT)
  • Certified Ethical Hacker (CEH)
  • Global Information Assurance Certification Penetration Tester (GPEN)
• Experience scripting in Perl, Python, Ruby, Bash, or Java
• Experience with wireless LAN security testing
• Required to possess a DOD SECRET Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) upon assignment

Preferred Qualifications:

• Bachelor's degree in a related field

Pay and Benefits

The annual salary range for this position is $90,000 - $150,000.

At Goldbelt, we value and reward our team's dedication and hard work. We provide a competitive base salary commensurate with your qualifications and experience. As an employee, you'll enjoy a comprehensive benefits package, including medical, dental, and vision insurance, a 401(k) plan with company matching, tax-deferred savings options, supplementary benefits, paid time off, and professional development opportunities.