Penetration Tester-Ethical Hacker - RedLens InfoSec

$75,000 - $115,000/Yr

Nelnet - Sioux Falls, SD

Full-time - Mid Level

Sioux Falls, SD

Credit Intermediation and Related Activities

About the position

The Penetration Tester/Ethical Hacker at CampusGuard, a Nelnet Company, is responsible for assessing and enhancing the security posture of customer networks and systems. This role involves conducting vulnerability assessments, penetration testing, and providing detailed reports to clients. The position requires a strong technical background in information security, excellent communication skills, and the ability to articulate complex issues to non-technical audiences. The individual will also support security assessments and assist in sales and marketing activities as needed.

Responsibilities

• Scan and perform in-depth penetration testing and reporting on customer business and operating environments and network infrastructure related to compliance and industry standards.
• Understand the Scope of Work for each customer agreement and perform the required duties in an organized manner.
• Conduct vulnerability assessments and penetration testing using commercial and open-source tools.
• Perform web application penetration testing in line with Open Web Application Security Project standards.
• Exploit security flaws and vulnerabilities with attack simulations on customer systems and networks.
• Provide technical risk assessments of technologies in networks, applications, systems, and wireless environments.
• Review and analyze security vulnerability data to identify applicability and false positives.
• Document all processes and procedures in accordance with CampusGuard standards.
• Report findings and advise customers on remediation activities as required.
• Research and develop testing tools, techniques, and process improvements.
• Assist with sales and marketing activities, including participating in sales calls and attending conferences.

Requirements

• Bachelor's degree in Computer Science, Cyber Security, or equivalent experience, or 3 years in the information security industry.
• Possess industry-recognized security certifications such as OSCP, GPEN, OSWE, OSWP, CompTIA PenTest+, CASP+, CRTO, or PNPT.
• If education or certification criteria are not met, a minimum of five years of relevant information security experience is required.

Nice-to-haves

• Experience with penetration testing of cloud-hosted environments is a plus.
• Strong understanding of various web technologies and testing methodologies.
• Offensive Security Web Expert (OSWE), Offensive Security Certified Expert (OSCE), or Offensive Security Certified Professional (OSCP) highly preferred.

Benefits

• Medical, dental, and vision insurance
• Health Savings Account (HSA) and Flexible Spending Account (FSA)
• Generous earned time off
• 401K and student loan repayment
• Life insurance and AD&D insurance
• Employee assistance program
• Employee stock purchase program
• Tuition reimbursement
• Performance-based incentive pay
• Short- and long-term disability
• Robust wellness program