Penetration Tester

Avert Staffing Group

Full-time

About the position

In this role, you will lead highly technical AWS penetration testing services after completing the necessary training. You will be responsible for providing guidance, mentorship, and oversight in delivering cloud penetration testing services to our customers. Your expertise will be crucial in developing strategic recommendations to help customers remediate identified cloud vulnerabilities effectively. You will also engage in research to discover new cloud attack vectors, ensuring that these findings are incorporated into Rhino's tools and processes. Additionally, you will provide training and mentorship for associate cloud security pentesters, fostering their growth and enhancing the team's capabilities. Supporting Project Managers, you will ensure that customers receive a high level of care and technical quality throughout the engagement process.

Responsibilities

• Lead AWS penetration testing services after training completion.
• Provide guidance and mentorship to team members delivering cloud pentest services.
• Develop strategic recommendations for customers to remediate cloud vulnerabilities.
• Research new cloud attack vectors and incorporate findings into tools and processes.
• Provide training and mentorship for associate cloud security pentesters.
• Support Project Managers in delivering high-quality technical care to customers.

Requirements

• Strong understanding of AWS architecture and CLI/API fundamentals, particularly for common AWS services.
• Proficient in AWS security services, including CloudTrail, CloudWatch, GuardDuty, KMS, SSO, Secrets Manager, Cognito, and VPCs/VPC Flow Logs.
• Knowledge of AWS attack vectors and potential misconfigurations, such as IAM privilege escalation methods and EC2 Systems Manager.
• Hands-on experience scripting with Python/Boto3 or another AWS SDK.