Penetration Tester, Mid

$60,300 - $137,000/Yr

Booz Allen Hamilton - Houston, TX

Part-time,Full-time - Mid Level

Onsite - Houston, TX

Professional, Scientific, and Technical Services

About the position

As a Mid-Level Penetration Tester at Booz Allen Hamilton, you will play a crucial role in supporting both remote and onsite testing efforts of client networks to identify and expose security weaknesses. Your primary responsibility will be to maintain baseline system security in accordance with organizational policies while monitoring and evaluating the effectiveness of the enterprise's cybersecurity safeguards. This ensures that the systems provide the intended level of protection against potential threats. You will collaborate with various stakeholders to resolve computer security incidents and ensure compliance with vulnerability management protocols. Additionally, you will be tasked with identifying, assessing, and recommending cybersecurity products that align with the organization's evaluation and validation requirements. In this role, you will leverage your expertise in penetration testing to conduct thorough assessments of network, application, and external security. You will create detailed Technical Assessment Reports that outline your findings and suggest remediation efforts. Your knowledge of penetration testing methodologies will be essential as you navigate through various security testing tools such as Burp Suite, SQLMap, Nmap, Nessus, Metasploit, and Cobalt Strike. Furthermore, you will be expected to stay updated with the latest vulnerability information sources, including alerts, advisories, and bulletins, to ensure that your testing efforts are informed by current threats and vulnerabilities. To succeed in this position, you will need to possess a Secret clearance and either a Bachelor's degree or at least three years of experience in a cybersecurity or system administrator role. Your ability to communicate effectively and organize your findings will be critical in delivering clear and actionable insights to clients and stakeholders. Additionally, certifications such as GWAPT, GPEN, OSCP, or CRTP will be advantageous in demonstrating your expertise in the field.

Responsibilities

• Support remote and onsite testing efforts of a client's network to expose weaknesses in security.
• Maintain baseline system security according to organizational policies.
• Monitor and evaluate the effectiveness of the enterprise's cybersecurity safeguards.
• Work with stakeholders to resolve computer security incidents and vulnerability compliance.
• Identify, assess, and recommend cybersecurity or cybersecurity-enabled products for use within a system.
• Create Technical Assessment Reports detailing findings and remediation efforts.
• Conduct penetration testing including network, application, and external assessments.

Requirements

• 1+ years of experience with penetration testing.
• Experience with security testing tools such as Burp Suite, SQLMap, Nmap, Nessus, Metasploit, or Cobalt Strike.
• Experience creating Technical Assessment Reports which detail findings and remediation efforts.
• Knowledge of penetration test methodology.
• Secret clearance required.
• Bachelor's degree or 3+ years of experience in a cybersecurity or system administrator role in lieu of a degree.

Nice-to-haves

• Experience creating Rules of Engagement (ROE), test plans, and scripts to aid in testing efforts.
• Experience conducting web application and API penetration testing.
• Experience with network hardware devices and functions, and network traffic analysis methods.
• Knowledge of defense evasion in enterprise environments and custom payload generation.
• Knowledge of incident categories, incident responses, and timelines for responses.
• Knowledge of network access, identity, and access management such as public key infrastructure, Oauth, OpenID, SAML, and SPML.
• Possession of excellent verbal communication and organization skills.
• GWAPT, GPEN, OSCP, or CRTP Certifications.

Benefits

• Health insurance coverage.
• Life insurance coverage.
• Disability insurance coverage.
• Financial and retirement benefits.
• Paid leave.
• Professional development opportunities.
• Tuition assistance programs.
• Work-life programs.
• Dependent care support.