Penetration Test Engineer

Graham Technologies - Washington, DC

Full-time - Mid Level

Remote - Washington, DC

Professional, Scientific, and Technical Services

About the position

Graham Technologies is seeking an experienced Penetration Test Engineer to conduct various security assessments as part of a Security Operations Center. This remote position involves managing the penetration testing process from start to finish, ensuring high standards of security and efficiency. The role includes conducting penetration tests, database and web application scanning, and leading phishing exercises.

Responsibilities

• Conduct comprehensive penetration testing, including internal and external assessments.
• Lead phishing exercises, database scans, and web application scans to identify vulnerabilities.
• Manage all phases of the penetration testing process, from scoping to execution and reporting.
• Develop detailed penetration testing documents such as scoping documents, Rules of Engagement (ROE), and reports.
• Utilize various penetration testing tools, including Nmap, Burp, curl, wget, Nessus, Nikto, and SQLMAP.
• Perform detailed database and web application scanning using appropriate tools.
• Write clear and compelling documentation that captures findings and recommendations.

Requirements

• Active TS Clearance is required.
• Bachelor's Degree in Computer Science, Information Security, or a related field.
• Certification in Penetration Testing (e.g., SANS or equivalent).
• Proficiency in Python programming.
• Experience leading internal and external penetration tests.
• Experience with a wide array of penetration testing tools and methodologies.
• Robust documentation and communication skills, with the ability to write clear, compelling, and technical reports.

Benefits

• Four Week's Accrued PTO First Year
• Ten Paid Federal Holidays
• Health, Dental, Vision, and Life Insurance
• 401(k) Plan with Annual Employer Contributions
• Flexible Schedules
• Reimbursements for Continued Education and Training