Penetration Tester

Intone Networks - Washington, DC

Full-time - Mid Level

Washington, DC

Professional, Scientific, and Technical Services

About the position

As a Penetration Tester at Intone Networks, you will be responsible for conducting comprehensive security assessments and penetration tests on various systems, applications, and networks. Your role will involve simulating cyber-attacks to identify vulnerabilities and weaknesses in the organization's security posture. You will work closely with the security team to develop and implement testing methodologies, ensuring that all assessments are thorough and adhere to industry standards. Your findings will be documented in detailed reports, which will include actionable recommendations for remediation. You will also participate in security awareness training for staff and assist in the development of security policies and procedures. This position requires a strong understanding of various penetration testing tools and techniques, as well as the ability to think creatively to exploit vulnerabilities. You will be expected to stay current with the latest security trends and threats, continuously improving your skills and knowledge in the field.

Responsibilities

• Conduct penetration tests on web applications, networks, and systems to identify vulnerabilities.
• Document findings and provide detailed reports with actionable recommendations for remediation.
• Collaborate with the security team to develop and implement testing methodologies.
• Participate in security awareness training for staff members.
• Assist in the development of security policies and procedures.
• Stay current with the latest security trends and threats.

Requirements

• Proven experience as a penetration tester or similar role in cybersecurity.
• Strong knowledge of penetration testing tools and techniques.
• Familiarity with various operating systems, networking protocols, and web technologies.
• Excellent analytical and problem-solving skills.
• Ability to communicate technical findings to non-technical stakeholders.

Nice-to-haves

• Certifications such as CEH, OSCP, or similar are preferred.
• Experience with scripting languages such as Python or Bash.
• Knowledge of compliance frameworks such as PCI-DSS, HIPAA, or NIST.

Benefits

• Competitive salary based on experience.
• Flexible work hours and remote work options.
• Opportunities for professional development and training.