Mindpoint Group - Saint Paul, MN

posted 3 months ago

Full-time - Mid Level
Remote - Saint Paul, MN
Professional, Scientific, and Technical Services

About the position

MindPoint Group is seeking a Penetration Tester to assist our government and commercial clients with conducting security assessments of their web and mobile applications, as well as their underlying infrastructure. In this role, you will be responsible for conducting vulnerability assessments, carrying out penetration tests, and performing social engineering tests. You will analyze technical security weaknesses, perform risk analyses, and develop exploits. Additionally, you will research and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, and encryption. You will also be tasked with developing tools, techniques, training, and countermeasures for computer and network vulnerabilities, data hiding, and encryption. As a Penetration Tester, you will have the opportunity to work within one of the most diverse organizations based in Washington DC. You will be part of a team that is profoundly invested in selecting the right people to join our team and is equally driven to expand and develop careers long-term. The position promises mentorship opportunities with leaders focused on your growth, generous tuition and professional development reimbursements, and competitive benefits including 401k matching and 11 federal holidays. This role allows for flexibility, with options for telework when not on client sites, which may require on-site engagements for a week or more in Washington DC.

Responsibilities

  • Conduct vulnerability assessments
  • Carry out penetration tests and perform social engineering tests
  • Analyze technical security weaknesses
  • Perform risk analyses and develop exploits
  • Research and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, and encryption
  • Develop tools, techniques, training, and countermeasures for computer and network vulnerabilities, data hiding, and encryption.

Requirements

  • US Citizen required, Secret Clearance highly desired
  • Minimum of 2 years of general work experience and 2 years of relevant experience in functional responsibility
  • Bachelor's Degree, or an equivalent combination of formal education and experience
  • Strong technical background with understanding of system architecture and design, operating systems, network infrastructure, software installation on test platforms, software development, database, and operating systems
  • Experience in Security, Software Development, Networking, and/or Systems Administration
  • Deep understanding of 3-tiered Web Applications and Mobile Application Architectures
  • Manual Penetration Testing Experience (i.e. mapping applications, injecting SQLi, XSS, XXE, exploit creation)
  • Commercial Web Application Tool Experience (i.e. BurpSuite, AppScan, WebInspect)
  • Network Penetration Testing Tool Experience (i.e. Nmap, Nessus, Wireshark, Metasploit, Hydra, John)
  • Exceptional communication skills, with the ability to explain the technical details of OWASP Top 10 and other vulnerabilities from C-levels to developers in a large professional environment.

Nice-to-haves

  • Web Services Security Penetration Testing Experience
  • Software Development and/or Scripting Experience in .NET, C++, Java, C#, perl, python, or bash
  • Mobile Application Penetration Testing (i.e. iOS, Android, Windows, Blackberry)
  • Database Experience (DBA or security penetration testing)
  • Source Code Review (aka Static Analysis) Experience
  • Excellent technical writing skills and attention to detail.

Benefits

  • Health/Dental/Vision insurance
  • 401(k) match
  • Flexible Time Off
  • Short-term/Long-term Disability/Life Insurance
  • Referral Bonuses
  • Professional development reimbursement
  • Maternity/Paternity leave
  • Mobile phone stipend
  • Pre-tax commuter benefits
  • Mentorship program opportunities
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service