Penetration Tester-Ethical Hacker - RedLens InfoSec

$75,000 - $115,000/Yr

Nelnet - Frankfort, KY

Full-time - Mid Level

Frankfort, KY

Credit Intermediation and Related Activities

About the position

The Penetration Tester/Ethical Hacker at CampusGuard, a Nelnet Company, is responsible for assessing customer business and operating environment risks, as well as the vulnerability posture of their infrastructure. This role involves scanning networks to discover and exploit security flaws, conducting penetration tests, and providing detailed reports to clients. The position requires a high level of technical expertise in network infrastructures and security vulnerabilities, along with excellent communication skills to convey findings to non-technical audiences.

Responsibilities

• Understand the Scope of Work for each customer agreement and perform the duties and tasks required by those agreements in an organized, professional manner.
• Perform vulnerability assessments and penetration testing, utilizing commercial and open source tools.
• Conduct web application penetration testing in line with Open Web Application Security Project.
• Exploit security flaws and vulnerabilities with attack simulations on multiple projects working against specific customer systems and networks in accordance with an agreed scope of work.
• Effectively provide technical risk assessment of technologies in networks, applications, systems, wireless, and perform social engineering.
• Review and analyze security vulnerability data to identify applicability and false positives.
• Document all processes and procedures in accordance with CampusGuard standards.
• Report on findings and advise customers in remediation activities as required.
• Research and develop testing tools, techniques, and process improvements.
• Assist with sales and marketing activities, including participating in sales calls and attending conferences.

Requirements

• Bachelor's degree in Computer Science, Cyber Security or equivalent, and/or 3 years' experience in the information security industry.
• Possess industry-recognized security certification(s) such as OSCP, GPEN, OSWE, OSWP, CompTIA PenTest+, CASP+, CRTO, PNPT.
• Minimum of five years of relevant information security experience or proof of other recognized security certifications if education criteria are not met.
• Strong understanding of various web technologies and testing methodologies.
• Experience with penetration testing of cloud hosted environments is a plus.

Nice-to-haves

• Offensive Security Web Expert (OSWE), Offensive Security Certified Expert (OSCE), or Offensive Security Certified Professional (OSCP) highly preferred.
• Demonstrates an ability to methodically analyze problems, identify solutions, and communicate to a non-technical audience.
• Exhibits good writing and communications skills, including the ability to render concise reports and formal presentations.

Benefits

• Medical, dental, vision insurance
• Health Savings Account (HSA) and Flexible Spending Account (FSA)
• Generous earned time off
• 401K and student loan repayment
• Life insurance & AD&D insurance
• Employee assistance program
• Employee stock purchase program
• Tuition reimbursement
• Performance-based incentive pay
• Short- and long-term disability
• Robust wellness program