Penetration Tester

IBM - Washington, DC

Part-time - Mid Level

Washington, DC

Computer and Electronic Product Manufacturing

About the position

As a Senior Penetration Tester at IBM, you will play a crucial role in supporting the mission of a progressive Federal agency. Your primary responsibility will be to conduct vulnerability assessments and penetration testing, adhering to the customer's prescribed scope to identify, assess, and exploit risks and vulnerabilities within information systems. This role requires a hands-on approach to penetration testing, where you will analyze test results and provide recommendations for changes and countermeasures to enhance the overall security posture of the enterprise. You will be expected to apply your technical skills to balance the need for security with the operational requirements of the client's organization, leveraging IBM's cognitive solutions to address cybersecurity threats effectively. In this position, you will be part of a team dedicated to protecting the IT infrastructure and resources of the U.S. Customs and Immigration Services (USCIS). Your work will directly contribute to safeguarding sensitive information and ensuring the integrity of the systems used by the agency. As a Security Consultant, you will collaborate closely with clients, utilizing analytical thinking and agile design principles to develop tailored security solutions that meet their specific needs. Your expertise will be instrumental in advancing the missions of our clients while fostering a culture of partnership and collaboration. IBM Consulting is committed to innovation and excellence, and as an IBMer, you will have the opportunity to grow your career in a dynamic environment that values continuous learning and development. You will be encouraged to experiment and take calculated risks, all while receiving support from a diverse and inclusive team that prioritizes trust and personal responsibility in all relationships. This role not only offers the chance to work on cutting-edge security challenges but also to contribute to the broader mission of making the world work better through technology.

Responsibilities

• Conduct vulnerability assessments and penetration testing for information systems.
• Analyze test results and recommend changes to enhance enterprise security.
• Collaborate with clients to design and implement security solutions tailored to their needs.
• Apply adversarial and computer attack methods to identify system vulnerabilities.
• Document system risks, test plans, procedures, and results for client reporting.

Requirements

• Experience with end-to-end testing, including adversarial and computer attack methods.
• Proficiency in penetration testing tools such as Nmap, Metasploit, and Kali Linux.
• Knowledge of security principles for Linux, Windows, and virtual platforms.
• Familiarity with programming languages such as Java, PHP, Perl, Python, Ruby, PowerShell, and Go.
• U.S. Citizenship and ability to obtain a Government Agency clearance.
• Active certification in one of the following: GXPN, OSCE, OSCP, or OSEE.

Nice-to-haves

• Experience in identifying false positives in vulnerability assessments.
• Ability to communicate vulnerability results to senior executives.
• Familiarity with documenting system risks and test plans.

Benefits

• Healthcare benefits including medical & prescription drug coverage, dental, vision, and mental health & well-being.
• Financial programs such as 401(k), cash balance pension plan, and life insurance.
• Generous paid time off including holidays, sick time, and vacation.
• Parental bonding leave and paid family leave benefits.
• Training and educational resources on a personalized learning platform.
• Diverse and inclusive employee resource groups and volunteer opportunities.