Job Description

Job Description

Job Description

Are you a cleared Penetration Tester looking for a new career challenge? If so, 10novate may have your next ideal opportunity with our team in Arlington, VA. 10novate is seeking a Penetration Test Engineer to join our team. In this role, you will work with other IT professionals providing quality assurance and security guidance for a centralized software testing environment. The position supports a meaningful government program that contributes to the greater human good. You will collaborate with Software Testers, Developers, and Systems Administrators to enable robust testing of applications in a virtualized environment. This position is currently hybrid on-site/remote with on-site work performed in Arlington, VA within a very collaborative work environment.

Responsibilities:

• Contributes to testing for weaknesses in customer systems, building on methodologies as promulgated by NIST, ISO, etc. to ensure useful, measurable, and repeatable methods applied to quantifying risk.
• Supports monitoring, testing, and troubleshooting of cybersecurity issues.
• Selects, installs, and configures security testing platforms and tools or develop tools and procedures for vulnerability assessments and penetration tests.
• Performs vulnerability assessments using automated tools
• Performs manual penetration tests and validation of vulnerability scan results.
• Develops automation/scripts for replicating vulnerability validation and penetration tests.
• Devises plans and scenarios for various types of penetration tests.
• Documents exploits and results for remediation within a final report.

Education and Experience:

• 4-year technical degree such as Computer Science, Business Information Systems, Engineering or a related field highly desired
• 8+ years’ experience in penetration testing of databases (DB) and web applications
• 5+ years of DB and web application development experience; able to program and review code
• Experience with penetration testing in a highly integrated environment and on cloud platforms such as Azure or AWS.

Required Skills, Competencies and Clearance:

• DevSecOps experience and ability to automate the deployment of secure solutions using tools including Ansible/Chef/Puppet
• Able to configure and spin up VMs
• Experience with regulatory compliance, policy development, and policy enforcement
• Experience with the following tools:
  • SoapUI
  • sqlmap
  • Nmap
  • Burp Suite
  • IBM AppScan
• Expert level understanding of security vulnerabilities as they relate to networks, web applications, web services, desktop applications, and desktop services and the ability to provide proofs of concept for vulnerability findings
• Testing expertise: Must be able to write test reports to summarize findings and provide recommended remediations and to provide penetration testing plans, schedules, and level-of-effort estimates
• Basic SQL expertise in Oracle or Microsoft
• Excellent communication and interpersonal skills
• Programming experience with focus on penetration testing and process automation
• CISSP, PMP, and OSCP Certification highly desired
• US Citizenship is Required . Do not apply to this position if you are not a U.S. citizen . The successful candidate is subject to a background investigation by the government and must be able to obtain and maintain a U.S. Department of Defense Secret security clearance.

AN EQUAL OPPORTUNITY EMPLOYER

All employment decisions are made without regard to race, color, religion, sex, sexual orientation, national origin, age, creed, ancestry, marital status, non-job-related handicap or disability, veteran status, or any other legally protected status.

10novate develops management and technology solutions that deliver measurable improvement in government performance and value.

Company Description

10novate develops management and technology solutions that deliver measurable improvement in government performance and value.

Job Tags

Similar Jobs