Penetration Tester

$103,800 - $156,000/Yr

University of California - San Francisco, CA

Full-time - Mid Level

San Francisco, CA

Educational Services

About the position

The University of California San Francisco is seeking an experienced Penetration Tester specializing in web application testing. This role is crucial for conducting comprehensive assessments of web applications to identify vulnerabilities and enhance security measures, particularly for the California Immunization System.

Responsibilities

• Conduct penetration testing on web applications to identify vulnerabilities that could be exploited by adversaries.
• Perform white-box, gray-box, and black-box testing of enterprise applications and assets, providing actionable reports to technical teams and stakeholders.
• Collaborate with the Information Security Office (ISO) and system owners to define the rules of engagement (ROE) for penetration testing in production environments.
• Conduct pretest analysis based on full knowledge of the target system and identify potential vulnerabilities.
• Test to determine the exploitability of identified vulnerabilities.
• Document the results of the penetration testing, including detected and exploited vulnerabilities and remediation strategies.
• Conduct follow-up penetration testing to confirm successful remediation of vulnerabilities.

Requirements

• Experience in penetration testing, particularly for web applications.
• Strong understanding of web application vulnerabilities and security best practices.
• Proficiency in various penetration testing methodologies (white-box, gray-box, black-box).
• Ability to document findings and provide actionable recommendations for remediation.
• Experience collaborating with technical teams and stakeholders.

Nice-to-haves

• Certifications such as CEH, OSCP, or similar in penetration testing or ethical hacking.
• Familiarity with security tools and frameworks used in penetration testing.

Benefits

• Comprehensive health insurance coverage.
• Retirement savings plan options.
• Paid holidays and vacation days.
• Professional development opportunities.