Penetration Tester-Ethical Hacker - RedLens InfoSec

$75,000 - $115,000/Yr

Nelnet - Rocky Hill, CT

Full-time - Mid Level

Rocky Hill, CT

Credit Intermediation and Related Activities

About the position

The Penetration Tester/Ethical Hacker at CampusGuard, a Nelnet Company, is responsible for assessing and enhancing the security posture of customer networks and systems. This role involves conducting vulnerability assessments, penetration testing, and providing detailed reports to clients. The position requires a strong technical background in information security, excellent communication skills, and the ability to articulate complex issues to non-technical audiences. The individual will also support security assessments and assist in sales and marketing activities as needed.

Responsibilities

• Scan and perform in-depth penetration testing and reporting on customer business and operating environments and network infrastructure related to compliance and industry standards.
• Understand the Scope of Work for each customer agreement and perform the required duties in an organized manner.
• Conduct vulnerability assessments and penetration testing using commercial and open-source tools.
• Perform web application penetration testing in line with Open Web Application Security Project standards.
• Exploit security flaws and vulnerabilities with attack simulations on customer systems and networks.
• Provide technical risk assessments of technologies in networks, applications, systems, and wireless environments.
• Review and analyze security vulnerability data to identify applicability and false positives.
• Document all processes and procedures in accordance with CampusGuard standards.
• Report findings and advise customers on remediation activities as required.
• Research and develop testing tools, techniques, and process improvements.
• Assist with sales and marketing activities, including participating in sales calls and attending conferences.

Requirements

• Bachelor's degree in Computer Science, Cyber Security, or equivalent experience.
• Minimum of 3 years' experience in the information security industry or 5 years of relevant experience without the degree.
• Possess industry-recognized security certifications such as OSCP, GPEN, OSWE, OSWP, CompTIA PenTest+, CASP+, CRTO, or PNPT.
• Ability to prepare for and pass additional certifications as directed by a supervisor.

Nice-to-haves

• Experience with penetration testing of cloud-hosted environments.
• Strong understanding of various web technologies and testing methodologies.
• Demonstrated ability to analyze problems and communicate solutions to a non-technical audience.

Benefits

• Medical, dental, and vision insurance
• Health Savings Account (HSA) and Flexible Spending Account (FSA)
• Generous earned time off
• 401K and student loan repayment
• Life insurance and AD&D insurance
• Employee assistance program
• Employee stock purchase program
• Tuition reimbursement
• Performance-based incentive pay
• Short- and long-term disability
• Robust wellness program