Cyber Security Penetration Tester

$110,700 - $142,128/Yr

Lawrence Livermore National Laboratory - Livermore, CA

Full-time - Mid Level

Remote - Livermore, CA

Professional, Scientific, and Technical Services

About the position

Lawrence Livermore National Laboratory (LLNL) is seeking a Cyber Security Penetration Tester to join our team in Livermore, CA. This position is integral to our Information Technology Solutions Division (ITSD) and the Cyber Security Program (CSP), where you will conduct comprehensive penetration testing of LLNL networks, devices, computers, web applications, and cloud-delivered services. The role offers a hybrid work schedule, allowing for flexibility to work from home one or more days per week. You will engage in various processes, techniques, and procedures for performing penetration assessments and red team exercises, ensuring the security and integrity of our systems. As a Cyber Security Penetration Tester, you will perform network, system, web application, and cloud application penetration tests on both internal and external systems, including those on air-gapped networks. Your responsibilities will include researching, developing, and executing adversarial techniques to measure the effectiveness of our people, procedures, and technology. You will provide penetration testing support, troubleshoot and resolve issues, and manage processes, systems, and tools with a high degree of responsibility. Additionally, you will assist the penetration testing lead as a technical point of contact and interact with both internal and external personnel, documenting actions, findings, and making remediation recommendations. For those hired at the SES.2 level, additional responsibilities will include creating processes and procedures for penetration assessments, managing multiple complex tasks, and developing methods and tools to improve penetration testing capabilities. This role requires a strong foundation in computer and network technologies, as well as experience with various programming and scripting languages. You will also be expected to maintain a current penetration testing skillset through ongoing training and development. The position requires the ability to secure and maintain a U.S. DOE Q-level security clearance, which necessitates U.S. citizenship.

Responsibilities

• Conduct comprehensive penetration testing of LLNL networks, devices, computers, web applications, and cloud-delivered services.
• Engage in processes, techniques, and procedures for performing penetration assessments and red team exercises.
• Perform network, system, web application, and cloud application penetration tests on internal and external systems, including air-gapped networks.
• Research, develop, and execute adversarial techniques to measure the effectiveness of people, procedures, and technology.
• Provide penetration testing support, troubleshooting, and resolution of issues.
• Manage processes, systems, and tools with a high degree of responsibility.
• Assist the penetration testing lead as a technical point of contact and interact with internal and external personnel.
• Document actions, findings, and make remediation recommendations.
• Promote and support plans for diversity, equity, and inclusion within the program.
• Create processes, techniques, and procedures for penetration assessments at the SES.2 level.
• Manage multiple complex tasks and priorities, ensuring deadlines are met while leveraging team member skills.
• Develop methods, tools, and procedures to improve penetration testing capabilities.

Requirements

• Ability to secure and maintain a U.S. DOE Q-level security clearance, requiring U.S. citizenship.
• Bachelor's degree in Computer Science, Computer Engineering, or related field, or equivalent combination of education and experience.
• Knowledge of computer and network technologies, including Windows, Linux/UNIX, and Apple operating systems.
• Experience with programming or scripting languages such as C, C#, Python, Java, PowerShell, and Bash.
• Experience with penetration testing tools such as Nmap, Burp Suite, and command and control (C2) frameworks.
• Effective written and verbal communication skills, strong interpersonal skills, and ability to collaborate in a multi-disciplinary team environment.
• Ability to manage concurrent technical tasks with conflicting priorities and approach difficult problems with enthusiasm and creativity.

Nice-to-haves

• Master's degree in Computer Science, Computer Engineering, or a related field.
• Significant penetration testing experience, including cloud services such as AWS/Azure.
• Writing technical reports and presenting findings to customers and senior management.
• Knowledge of LLNL's Cyber Security policies, processes, and requirements.

Benefits

• 401(k)
• Flexible schedule
• Relocation assistance
• Tuition reimbursement
• Work from home