Cloud Security Pen Tester (must have DoD Clearance)

Sandoval Technology Solutions - San Antonio, TX

Full-time - Senior

San Antonio, TX

Professional, Scientific, and Technical Services

About the position

The Cloud Security Pen Tester at Sandoval Technology Solutions LLC is responsible for conducting security assessments, vulnerability scans, and penetration tests on Kubernetes and AWS cloud environments. This role requires a highly skilled individual with a strong background in cybersecurity, particularly in cloud security, to identify and remediate vulnerabilities while ensuring compliance with security policies and best practices. The position involves collaboration with cross-functional teams, particularly DevOps, to enhance the security posture of the organization.

Responsibilities

• Conduct security assessments, vulnerability scans, and penetration tests on Kubernetes and AWS cloud environments.
• Identify and prioritize security risks and vulnerabilities.
• Work closely with the DevOps team to implement security measures and remediate vulnerabilities.
• Develop and maintain testing scripts and tools.
• Stay up-to-date with the latest security threats, vulnerabilities, and best practices.
• Provide recommendations for improving the security of Kubernetes and AWS cloud environments.
• Prepare and present reports to management and stakeholders on the results of security assessments and penetration tests.
• Monitor security events and alerts to identify and analyze potential threats and vulnerabilities.
• Collaborate with incident response teams to investigate and respond to security incidents effectively.
• Conduct security assessments of AWS environments and Kubernetes clusters to identify and address weaknesses.
• Manage and remediate vulnerabilities in cloud and containerized environments.
• Ensure compliance with security policies, procedures, and standards, and recommend improvements when necessary.
• Assist in the development and delivery of cybersecurity training and awareness programs.

Requirements

• Active DOD Top Secret Clearance
• Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)
• CompTIA Security+ or equivalent IAT Level II certification
• Certification in ethical hacking, penetration testing, or related field (e.g., CEH, OSCP, OSWE)
• Demonstrated hands-on experience with AWS services, including EC2, S3, IAM, VPC, and AWS Security services
• Proficiency in Kubernetes, including deployment, configuration, and security best practices
• Strong understanding of threat intelligence sources and techniques
• Familiarity with security frameworks and standards (e.g., NIST, CIS)
• Strong analytical and problem-solving skills
• Excellent written and verbal communication skills
• Experience with scripting languages such as Python, Bash, or PowerShell
• Familiarity with security tools such as Nmap, Metasploit, Nessus, and Burp Suite

Nice-to-haves

• Experience with containerization technologies such as Docker
• Ability to identify and prioritize security risks and vulnerabilities
• Collaborative mindset with the ability to work effectively within cross-functional teams

Benefits

• Paid holidays
• Health insurance
• Dental insurance
• Paid time off
• Vision insurance
• Life insurance