Cloud Penetration Tester

$104,000 - $166,000/Yr

Peraton - Reston, VA

Full-time

Remote - Reston, VA

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

The Cloud Penetration Tester at Peraton will play a crucial role in enhancing cybersecurity analytics by conducting cloud adversarial emulation testing on the Department of Veterans Affairs (VA) Enterprise Cloud systems. This position requires a strong background in penetration testing, particularly in cloud and web application environments, and involves collaboration with cybersecurity teams to identify and remediate vulnerabilities effectively.

Responsibilities

• Conduct cloud adversarial emulation testing and assessments on VAEC resources.
• Perform purple-team activities to identify and exploit vulnerabilities, ensuring timely remediation.
• Provide weekly reports detailing planned tests, completed tests, and outcomes.
• Support 3rd party purple team Cybersecurity Infrastructure Security Agency (CISA) assessments on VAEC resources.
• Collaborate with cybersecurity engineers, analysts, and stakeholders to communicate findings effectively.
• Stay current with cloud security trends, tools, and best practices for effective penetration testing.
• Document and report vulnerabilities with recommendations for remediation.
• Support baseline tracking and reporting of cloud systems and assets with corresponding system owners.
• Support Cloud Incident Response Plan (IRP) Preparedness/Tabletop Exercise Plan.
• Support Cloud Vulnerability Scanning Services for continuous vulnerability scanning of systems.
• Provide Cloud Adversarial Emulation Testing/Assessment to ensure timely remediation of vulnerabilities.
• Review Cloud systems toolset configurations to meet security standards and VA policy.
• Provide Cloud Cyber Monitoring and Incident Response for cybersecurity incidents affecting VAEC resources.

Requirements

• 2 years experience with a Bachelor's degree in Information Technology, Cybersecurity, or a related field; or 6 years of experience without a degree.
• Ability to obtain Public Trust clearance.
• Must be a U.S. citizen.
• Must successfully undergo a Veterans Affairs High Security Investigation (VA BI).
• Experience in penetration testing, particularly in cloud environments (AWS, Azure, Microsoft 365, etc.).
• Strong understanding of cybersecurity principles in cloud environments and cloud-hosted web applications.
• Proven experience in adversarial emulation testing and purple-teaming activities.
• Proficiency in using penetration testing tools and technologies.
• Excellent organizational skills and attention to detail.
• Exceptional written and verbal communication skills.
• Exceptional analytical and conceptual thinking skills.
• Strong people skills and ability to work collaboratively.

Nice-to-haves

• Certification in penetration testing with cloud or web app focus (e.g., OSCP, GCPN, GDAT) is a plus.

Benefits

• Competitive salary range of $104,000 - $166,000 based on experience and other factors.