What are the responsibilities and job description for the Senior Penetration Tester position at Steampunk?
Overview
As a Senior Penetration Tester at Steampunk, you'll be supporting our Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA) clients. CISA is charged with leading the Nation's strategic and unified work to strengthen the security, resilience, and workforce of the cyber ecosystem to protect critical services and American way of life. CISA works to assure the security, resilience, and reliability of the nation's cyber systems and critical infrastructure.
Contributions
Duties and Responsibilities:
- Vulnerability assessments, penetration tests; red teaming, report writing on findings and brief out
- As a member of a team or independent operator, be able to perform a variety of cyber security assessments to penetrate the network, applications, and/or operating systems of the designated organization.
- An ideal candidate will have experience leading a smaller team(s) of cyber operators and be a proactive problem solver with Red Team experience.
- Must appreciate the challenges of working in a fast paced, dynamic environment.
- Must have excellent verbal and written communication skills and be comfortable interacting with customers. Travel required between 15-25%.
Qualifications
Qualifications:
- Ability to communicate effectively in person and in writing; proficiency in word processing and other computer software programs;
- Minimum Education: Bachelor's degree in Computer Science, Engineering, Information Systems, Business, or a related field
- Years of Experience:
- Minimum of 5 years of operational cyber experience performing cyber assessments (See Required Skills)
- 2 or more years in team leadership or management role
- Education Substitution: No
- US Citizen
- Minimum of Secret Clearance; Must be eligible for TS
- DHS Suitability / Public Trust
- At least one related industry certification: OSCP, OSCE, GPEN, GXPN or equivalent
Required Skills:
- Ability to execute variety of cyber assessments (to include social engineering; phishing; network and web application pentesting; wireless testing, reverse engineering, log analysis etc) using industry standard tools;
- Proactive problem solver with planning experience and ability to organize, lead, and mentor junior team members;
- Possesses drive to continuously learn and keep pace with a fast moving and dynamic cyber adversary ecosystem;
- Strong written and verbal communication skills; capable of preparing reports and/or presentations that convey assessment findings;
- Experienced and comfortable interacting and communicating with teammates and customers
Ideal Skills:
- Cyber experience in Military, Intelligence Community, or Law Enforcement;
- Red team experience;
- Experienced at developing, refining, and memorializing effective methodologies, tools, and scripts for use by teammates
Steampunk is a federal contractor subject to Executive Order 14042 and Federal Acquisition Regulation (FAR) 52.223-99 implementing the order. Therefore, this position requires full vaccination for COVID-19, except in jurisdictions where the mandate is barred by a court ordered injunction.
About steampunk
Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. As an employee owned company, we focus on investing in our employees to enable them to do the greatest work of their careers – and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.