Penetration Tester-Ethical Hacker - RedLens InfoSec

$75,000 - $115,000/Yr

Nelnet - Trenton, NJ

Full-time - Mid Level

Trenton, NJ

Credit Intermediation and Related Activities

About the position

The Penetration Tester/Ethical Hacker at CampusGuard, a Nelnet Company, is responsible for assessing the security posture of customer environments through vulnerability assessments and penetration testing. This role requires a deep understanding of network infrastructures, operating systems, and security vulnerabilities, as well as the ability to communicate findings effectively to non-technical stakeholders. The position involves conducting security assessments, providing remediation advice, and supporting sales and marketing efforts as an industry expert.

Responsibilities

• Scan and perform in-depth penetration testing and report on customer business and operating environments and network infrastructure related to compliance and industry standards.
• Understand the Scope of Work for each customer agreement and perform the required duties in an organized manner.
• Perform vulnerability assessments and penetration testing using commercial and open-source tools.
• Conduct web application penetration testing in line with Open Web Application Security Project standards.
• Exploit security flaws and vulnerabilities with attack simulations on customer systems and networks.
• Provide technical risk assessments of technologies in networks, applications, systems, and wireless environments.
• Review and analyze security vulnerability data to identify applicability and false positives.
• Document all processes and procedures in accordance with CampusGuard standards.
• Report findings and advise customers on remediation activities as required.
• Research and develop testing tools, techniques, and process improvements.
• Assist with sales and marketing activities, including participating in sales calls and attending conferences.

Requirements

• Bachelor's degree in Computer Science, Cyber Security, or equivalent experience.
• Minimum of 3 years' experience in the information security industry or equivalent certifications.
• Possess industry-recognized security certifications such as OSCP, GPEN, OSWE, OSWP, CompTIA PenTest+, CASP+, CRTO, or PNPT.
• Ability to prepare for and pass additional certifications as directed by a supervisor.

Nice-to-haves

• Experience with penetration testing of cloud-hosted environments.
• Strong understanding of various web technologies and testing methodologies.
• Experience in higher education, healthcare, and government institutions.

Benefits

• Medical, dental, and vision insurance
• Health Savings Account (HSA) and Flexible Spending Account (FSA)
• Generous earned time off
• 401K and student loan repayment
• Life insurance and AD&D insurance
• Employee assistance program
• Employee stock purchase program
• Tuition reimbursement
• Performance-based incentive pay
• Short- and long-term disability
• Robust wellness program