Introduction

Job Description

• Develop and maintain a multi-year schedule for penetration testing activities 
• Interface and coordinate with third party organizations performing penetration testing for the Department 
• Interface and coordinate with system owners to establish targets for testing, test schedule, test goals, and rules of engagement 
• Organize and lead efforts that document and design improvement strategies for discovered vulnerabilities and monitoring gaps 
• Design, perform and report on penetration testing of systems to satisfy the NIST 800-53 CA-8 security control and using methodologies that may include, NIST SP 800-115, Penetration Testing Execution Standard (PTES), and Information Systems Security Assessment Framework (ISSAF) 
• Produce reports and conduct management briefings on test activities, scenarios, results and recommendations  
• Stay abreast of current attack vectors and unique methods for exploitation of computer networks 

• To be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below: 
• A Bachelor of Science degree with 9 years of experience is required (7 years with Master’s degree). In lieu of a Bachelor’s degree, 4 years of additional experience may be substituted 
• Experience Leading a Team
• Active Top Secret security clearance is required with the ability to obtain SCI 
• Possess 
  • CASP CE
  •  CCNA Cyber Ops 
  •  CCNA-Security
  •  CCNP Security
  •  CEH
  •  CFR
  •  CISA
  •  CISSP (or Associate)
  •  Cloud
  •  CySA  
  •  GCED
  •  GCIA
  •  GCIH
  •  GICSP
  •  SCYBER or similar certification 
• Proficient at conducting network or software vulnerability assessments and penetration testing utilizing reverse engineering techniques 
• Proven capability in identifying intrusion or incident path and method; isolates, blocks or removes threat access 
• Familiar and proficient in evaluating system security configurations. Has expertise in evaluating findings and performing root cause analysis 
• Able to perform analysis of complex software systems to determine both functionality and intent of software systems. Able to resolve highly complex malware and intrusion issues 

• Experience supporting the Department of State cyber security mission 
• Experience Leading a Team
• Experience with Red Cell Cyber operations