Vulnerability Assessment Analyst and Penetration Tester

Vulnerability Assessment Analyst and Penetration Tester

Responsibilities include but not limited to:
- Perform manual assessments of systems, services, and software, specializing in security issues beyond those identified by static analysis tools.
- Help ensure services, applications, and websites are designed and implemented to the highest security standards.
- Application and hardware penetration testing
- Automating repetitive tasks with scripting languages
- Mentoring and leading engineers through complex penetration tests and vulnerability assessments
- Advancing penetration testing capabilities through automation and tooling, and creating threat mitigation plans.

Required Skills

- Must be US Citizen due to government requirement
- Must have an active DoD Top Secret/SCI
- Bachelor-s degree in Cybersecurity, Cyber Operations, Cyber Engineering, Information Systems, Information Technology, Computer Engineering, Electrical Engineering, Electronics Engineering, Software Engineering,
Computer Science, Mathematics with a concentration in Computer Science, or an equivalent discipline.
- DoD 8570.01-M in accordance with DFARS View phone number on us.fitly.work Baseline Certification: minimum CSSP Auditor.
- One of the following certifications: Offensive Security Certified Professional (OSCP), Offensive Security
Certified Expert (OSCE), Offensive Security Exploitation Expert (OSEE), or Offensive Security Wireless Professional (OSWP).
- Seven (7) years of full-time professional experience conducting penetration testing or offensive cyber
operations in the following areas:
- Developing and using penetration testing tools such as Metasploit, NMAP, Kali Linux, and Cobalt Strike.
- Mimicking threat behavior.
- Using multiple operating systems, including Linux, Windows, macOS, and related platforms.
- Using Active Directory.
- Performing exploit development.
- Identifying gaps in tools and development techniques.
- Developing with at least two scripting or programming languages, such as Python, C++, Java, Rust, Assembly, or C#.