Penetration Tester-Ethical Hacker - RedLens InfoSec

$75,000 - $115,000/Yr

Nelnet - Aurora, CO

Full-time - Mid Level

Aurora, CO

Credit Intermediation and Related Activities

About the position

The Penetration Tester/Ethical Hacker at CampusGuard, a Nelnet Company, is responsible for assessing the security posture of customer networks and systems. This role involves conducting vulnerability assessments, penetration testing, and providing detailed reports on findings to clients. The position requires a strong technical background in information security, excellent communication skills, and the ability to articulate complex issues to non-technical audiences. The individual will also support security assessments and assist with sales and marketing activities as needed.

Responsibilities

• Scan and perform in-depth penetration testing and reporting on customer business and operating environments and network infrastructure related to compliance and industry standards.
• Understand the Scope of Work for each customer agreement and perform the required duties in an organized manner.
• Perform vulnerability assessments and penetration testing using commercial and open-source tools.
• Conduct web application penetration testing in line with Open Web Application Security Project standards.
• Exploit security flaws and vulnerabilities with attack simulations on customer systems and networks.
• Provide technical risk assessments of technologies in networks, applications, systems, and wireless environments.
• Review and analyze security vulnerability data to identify applicability and false positives.
• Document all processes and procedures in accordance with CampusGuard standards.
• Report findings and advise customers on remediation activities as required.
• Research and develop testing tools, techniques, and process improvements.
• Assist with sales and marketing activities, including participating in sales calls and attending conferences.

Requirements

• Bachelor's degree in Computer Science, Cyber Security, or equivalent experience.
• Minimum of 3 years' experience in the information security industry or 5 years of relevant experience if education criteria are not met.
• Possess industry-recognized security certifications such as OSCP, GPEN, OSWE, OSWP, CompTIA PenTest+, CASP+, CRTO, or PNPT.
• Ability to prepare for and pass additional certifications as directed by a supervisor.

Nice-to-haves

• Experience with penetration testing of cloud-hosted environments.
• Strong understanding of various web technologies and testing methodologies.

Benefits

• Medical, dental, and vision insurance
• Health Savings Account (HSA) and Flexible Spending Account (FSA)
• Generous earned time off
• 401K and student loan repayment
• Life insurance and AD&D insurance
• Employee assistance program
• Employee stock purchase program
• Tuition reimbursement
• Performance-based incentive pay
• Short- and long-term disability
• Robust wellness program