Senior Penetration Tester

Company Description  

TMDA partners with Fortune 1000 companies in their talent solutions and Human Resources advisory needs. We provide a consultative approach in partnering with our clients and members of their team. Our Talent Solutions group serve as an extension of the clients; thereby providing compliant growth at a scalable and sustainable rate. 

Job Description 

The Senior Penetration Tester will work with our GovCon client.

Benefits:

• Matching 401K
• Paid Time Off
• 11 Paid Federal Holidays
• Professional Development 
• Comprehensive Medical, Dental and Vision Plans

Responsibilities:

• Every day, you’ll be teaming up with a diverse, enthusiastic, multi-disciplinary team of creative minds with a smart sense of humor.
• The Senior Pen Tester will provide leadership and support for a mission critical data and legacy program for a very important customer and enable real mission outcomes.
• Execute processes responsible for the advanced analysis of security threats (malicious code, intrusion logging, etc.) to proactively develop detection for such threats and develop mitigation efforts.
• Support inquiries from compliance teams such as IT risk management and internal and external audit, to ensure documentation is complete and in compliance with information security policies.
• Identify, evaluate, and monitor continually threats that could affect operational and business activities.

Qualifications:  

• Minimum of 8 years of experience in IT security, and 5 years specialized experience in penetration testing.
• Experience with end to end testing, including applying adversarial and computer attack methods and system exploitation techniques.
• Experience with penetration testing tools such as Nmap, fluff, Metasploit, Kali Linux, Core Impact, Immunity Canvas.
• Experience applying Linux, Windows, and virtual platforms security principles.
• Working knowledge of one or more of the following programming languages: Java, PHP, Perl, Python, Ruby, PowerShell, Go.
• Experience with identifying false-positives, documenting system risks, test plans, procedures, and results.
• Prior experience participating in technical exchange meetings, review boards, and brief customer and team leadership on actions, findings and results, and recommendations to support mission objectives.
• Experience with risk management methodologies and risk and threat mitigation plans.
• Experience communicating vulnerability results and risk posture to senior executives.
• Experience performing complex technical tasks with minimal direction.
• Ability to demonstrate and explain technical concepts to both technical and non-technical audiences.
• Able to clearly communicate with both customers and teammates and provide recommendations for improvements to existing software applications.
• Experience supporting DHS Agencies preferred but not required.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future. 

Education 

• Bachelor’s Degree in a related field or a combination of training, certifications, and experience 

Certifications

• One of the following certifications are required

  • Exploit Researcher and Advanced Penetration Tester (GXPN)
  • Offensive Security Certified Expert (OSCE)
  • Offensive Security Certified Professional (OSCP)
  • Offensive Security Exploitation Expert (OSEE)

Travel Requirements:  

This position will involve no travel.

Additional Information 

TMDA is proud to be an equal opportunity employer. Qualified candidates are considered for employment without regard to race, color, religion, sex, or national origin. 

All your information will be kept confidential according to EEO guidelines.