Penetration Tester

$124,800 - $135,200/Yr

Lone Star Heights - Fort Lauderdale, FL

Full-time - Mid Level

Fort Lauderdale, FL

About the position

The Security Analyst - Penetration Testing/Offensive Security position at Star Heights Corporation is a contract role focused on providing Vulnerability Assessment (VA) services globally. The role involves identifying weaknesses and vulnerabilities within the client's infrastructure, utilizing both commercial and open-source tools. The position is integral to enhancing security measures and methodologies within the organization, ensuring compliance with internal policies and industry standards.

Responsibilities

• Provide Vulnerability Assessment/Penetration Testing services to Client's businesses globally through a comprehensive testing process
• Participate in special projects ranging from tooling and methodology development, advanced penetration testing, as well as architecture reviews
• Serve as a Subject Matter Expert (SME) for Infrastructure Penetration Testing with emerging tooling sets
• Participate in the enhancement of testing processes and methodologies
• Build custom tooling aligned with strategic initiatives
• Validate the overall security of critical infrastructure components and applications
• Scan systems and applications, leverage initial results to build a subsequent attack methodology, and execute effectively
• Report Information Security vulnerabilities to businesses in an actionable manner

Requirements

• 3-5 years of relevant experience in Offensive Security
• Strong scripting/coding and security tooling experience (Python, Go, Bash, C++/C, Rust)
• Hands-on experience with Vulnerability Assessment/Enumeration tools (e.g., Tenable Nessus, Qualys VM)
• Experience with penetration testing tools (e.g., Kali suite, open-source tooling)
• Deep understanding of TCP/IP and Infrastructure stacks
• Experience working effectively in Enterprise environments
• Understanding of defensive security principles
• OS and Network Security Experience (e.g., Unix, Linux, Windows, Cisco)
• Understanding of common protocols (e.g., DNS, SMTP, SNMP, LDAP, Routing Protocols)
• Exceptional interpersonal skills and ability to work with globally diverse teams
• Ability to document and explain exploits/vulnerabilities to technical and non-technical audiences

Nice-to-haves

• Threat Mapping experience
• Design experience/understanding of infrastructure/systems

Benefits

• 401(k)
• Dental insurance
• Health insurance