Penetration Tester-Ethical Hacker - RedLens InfoSec

$75,000 - $115,000/Yr

Nelnet - Aberdeen, SD

Full-time - Mid Level

Aberdeen, SD

Credit Intermediation and Related Activities

About the position

The Penetration Tester/Ethical Hacker at CampusGuard, a Nelnet Company, is responsible for assessing customer business and operating environment risks, as well as infrastructure vulnerabilities. This role involves scanning networks, exploiting security flaws, and conducting penetration tests to ensure compliance with industry standards. The position requires strong technical skills and the ability to communicate findings effectively to non-technical audiences.

Responsibilities

• Understand the Scope of Work for each customer agreement and perform the duties and tasks required by those agreements in an organized, professional manner.
• Perform vulnerability assessments and penetration testing, utilizing commercial and open source tools.
• Conduct web application penetration testing in line with Open Web Application Security Project.
• Exploit security flaws and vulnerabilities with attack simulations on multiple projects working against specific customer systems and networks in accordance with an agreed scope of work.
• Effectively provide technical risk assessment of technologies in networks, applications, systems, wireless, and perform social engineering.
• Review and analyze security vulnerability data to identify applicability and false positives.
• Document all processes and procedures in accordance with CampusGuard standards.
• Report on findings and advise customers in remediation activities as required.
• Research and develop testing tools, techniques, and process improvements.
• Assist with sales and marketing activities, including participating in sales calls and attending conferences.

Requirements

• Bachelor's degree in Computer Science, Cyber Security or equivalent, and/or 3 years' experience in the information security industry.
• Possess industry-recognized security certification(s) such as OSCP, GPEN, OSWE, OSWP, CompTIA PenTest+, CASP+, CRTO, PNPT.
• Minimum of five years of relevant information security experience or proof of other recognized security certifications if education criteria are not met.

Nice-to-haves

• Offensive Security Web Expert (OSWE), Offensive Security Certified Expert (OSCE), or Offensive Security Certified Professional (OSCP) highly preferred.
• Experience with penetration testing of cloud hosted environments.

Benefits

• Medical, dental, vision insurance
• Health Savings Account (HSA) and Flexible Spending Account (FSA)
• Generous earned time off
• 401K and student loan repayment
• Life insurance & AD&D insurance
• Employee assistance program
• Employee stock purchase program
• Tuition reimbursement
• Performance-based incentive pay
• Short- and long-term disability
• Robust wellness program