Penetration Tester - Clearance Required - Remote

$155,000 - $155,000/Yr

Mindpoint Group - Annapolis, MD

Full-time - Mid Level

Remote - Annapolis, MD

Professional, Scientific, and Technical Services

About the position

MindPoint Group is seeking a Penetration Tester to assist our government and commercial clients with conducting security assessments of their web and mobile applications, as well as their underlying infrastructure. In this role, you will be responsible for conducting vulnerability assessments, carrying out penetration tests, and performing social engineering tests. You will analyze technical security weaknesses, perform risk analyses, and develop exploits. Additionally, you will research and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, and encryption. You will also be tasked with developing tools, techniques, training, and countermeasures for computer and network vulnerabilities, data hiding, and encryption. As a Penetration Tester, you will have the opportunity to work within one of the most diverse DC-based organizations. You will benefit from generous tuition and professional development reimbursements, mentorship opportunities with leaders focused on your growth, and competitive benefits such as 401k matching and 11 federal holidays. This position promises a dynamic work environment where you can grow your skills and contribute to meaningful projects that enhance the security posture of our clients.

Responsibilities

• Conducts vulnerability assessments
• Carries out penetration tests and performs social engineering tests
• Analyzes technical security weaknesses
• Performs risk analyses and develops exploits
• Researches and maintains proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, and encryption
• Develops tools, techniques, training, and countermeasures for computer and network vulnerabilities, data hiding, and encryption.

Requirements

• US Citizen required, Secret Clearance highly desired
• Minimum of 2 years of general work experience and 2 years of relevant experience in functional responsibility
• Bachelor's Degree, or an equivalent combination of formal education and experience
• Strong technical background and understanding of system architecture and design, operating systems, network infrastructure, software installation on test platforms, software development, database, and operating systems
• Experience in Security, Software Development, Networking, and/or Systems Administration
• Deep understanding of 3-tiered Web Applications and Mobile Application Architectures
• Manual Penetration Testing Experience (i.e. mapping applications, injecting SQLi, XSS, XXE, exploit creation)
• Commercial Web Application Tool Experience (i.e. BurpSuite, AppScan, WebInspect)
• Network Penetration Testing Tool Experience (i.e. Nmap, Nessus, Wireshark, Metasploit, Hydra, John)
• Exceptional communication skills, with the ability to explain the technical details of OWASP Top 10 and other vulnerabilities from C-levels to developers in a large professional environment.

Nice-to-haves

• Web Services Security Penetration Testing Experience
• Software Development and/or Scripting Experience in .NET, C++, Java, C#, perl, python, or bash
• Mobile Application Penetration Testing (i.e. iOS, Android, Windows, Blackberry)
• Database Experience (DBA or security penetration testing)
• Source Code Review (aka Static Analysis) Experience
• Excellent technical writing skills and attention to detail.

Benefits

• Health/Dental/Vision insurance
• 401(k) match
• Flexible Time Off
• Short-term/Long-term Disability/Life Insurance
• Referral Bonuses
• Professional development reimbursement
• Maternity/Paternity leave
• Mobile phone stipend
• Pre-tax commuter benefits
• Mentorship program opportunities