Penetration Tester-Ethical Hacker - RedLens InfoSec

$75,000 - $115,000/Yr

Nelnet - Salt Lake City, UT

Full-time

Salt Lake City, UT

Credit Intermediation and Related Activities

About the position

The Penetration Tester/Ethical Hacker at CampusGuard, a Nelnet Company, is responsible for assessing customer business risks and infrastructure vulnerabilities. This role involves scanning networks, exploiting security flaws, and providing detailed reports to clients. The position requires a high level of technical expertise in network infrastructures and the ability to communicate findings effectively to non-technical audiences.

Responsibilities

• Understand the Scope of Work for each customer agreement and perform the duties and tasks required by those agreements in an organized, professional manner.
• Perform vulnerability assessments and penetration testing, utilizing commercial and open source tools.
• Conduct web application penetration testing in line with Open Web Application Security Project.
• Exploit security flaws and vulnerabilities with attack simulations on multiple projects working against specific customer systems and networks in accordance with an agreed scope of work.
• Effectively provide technical risk assessment of technologies in networks, applications, systems, wireless, and perform social engineering.
• Review and analyze security vulnerability data to identify applicability and false positives.
• Document all processes and procedures in accordance with CampusGuard standards.
• Report on findings and advise customers in remediation activities as required.
• Research and develop testing tools, techniques, and process improvements.
• Assist with sales and marketing activities, including participating in sales calls and attending conferences.

Requirements

• Bachelor's degree in Computer Science, Cyber Security or equivalent, and/or 3 years' experience in the information security industry.
• Possess industry-recognized security certification(s) such as OSCP, GPEN, OSWE, OSWP, CompTIA PenTest+, CASP+, CRTO, PNPT.
• Minimum of five years of relevant information security experience or proof of other recognized security certifications if education criteria are not met.

Nice-to-haves

• Strong understanding of various web technologies and testing methodologies.
• Experience with penetration testing of cloud hosted environments.

Benefits

• Medical, dental, vision insurance
• Health Savings Account (HSA) and Flexible Spending Account (FSA)
• Generous earned time off
• 401K and student loan repayment
• Life insurance & AD&D insurance
• Employee assistance program
• Employee stock purchase program
• Tuition reimbursement
• Performance-based incentive pay
• Short- and long-term disability
• Robust wellness program