Application Penetration Tester

Booz Allen Hamilton•Chantilly, VA

7d•Remote

About The Position

Work with a wide variety of clients, including Fortune 100 companies, to validate security controls and incident response through offensive security operations, including application penetration testing. Perform web application security testing, network penetration testing, and cloud penetration testing. Develop comprehensive and accurate reports, and presentations for both technical and executive audiences. Conduct security testing lifecycles in Windows and nix environments. Communicate findings and strategy to client stakeholders, including technical staff, executive leadership, and legal counsel. Perform innovative research and promote an environment of innovation and knowledge sharing. Apply security testing and penetration testing techniques and mindset to a wide range of projects, become part of a team of security enthusiasts that perform cutting-edge research, and promote an environment of innovation and knowledge sharing. Due to the nature of work performed within this facility, U.S. citizen ship is required.

Requirements

1+ years of experience conducting application penetration testing
Experience with scripting or coding in Python, Go, or Bash
Experience working in a Windows environment and with Active Directory attack path enumeration
Experience with C2 frameworks, including Cobalt Strike, Mythic, or Havoc
Knowledge of network vulnerability assessments, web application security testing, network penetration testing, or red teaming
HS diploma or GED
U.S. citizen ship is required

Nice To Haves

Experience working in a commercial environment, and with Burp Suite Professional
Experience deploying infrastructure in cloud environments
Bachelor's degree in CS or a related field
BSCP, OSWA, OSWE, OSCP, CRTO, GPEN, GXPN, OSCE, or GWAPT Certification

Responsibilities

Perform web application security testing, network penetration testing, and cloud penetration testing.
Develop comprehensive and accurate reports, and presentations for both technical and executive audiences.
Conduct security testing lifecycles in Windows and nix environments.
Communicate findings and strategy to client stakeholders, including technical staff, executive leadership, and legal counsel.
Perform innovative research and promote an environment of innovation and knowledge sharing.
Apply security testing and penetration testing techniques and mindset to a wide range of projects.