Cybersecurity Penetration Tester

SOCBOX, Inc.•San Diego, CA

3d•$100,000 - $110,000•Remote

About The Position

As Penetration Tester at FIT Cybersecurity, your responsibilities would include testing client’s internal and external networks, web applications, and APIs. The Penetration Tester will provide debriefing to both client technical and executive teams on security assessment findings. As a consultant, you'll solve challenging technical problems and build creative solutions. As a trusted advisor, you'll provide your expert opinion to help our clients navigate difficult business decisions. And as a security associate, you'll lead teams on one-of-a-kind engagements, mentor co-workers, and contribute significantly to the advancement of our assessment and penetration testing practice.

Requirements

Required Certification: GIAC Penetration Tester (GPEN).
Required Work Sample: Candidates must be able to provide a sanitized sample penetration testing report demonstrating their ability to document vulnerabilities, assess risk, present technical findings, and communicate actionable remediation recommendations. All samples must exclude confidential client information.
Strong foundational knowledge and hands-on experience in web application and network penetration testing.
Previous experience in cybersecurity consulting, penetration testing, or offensive security assessments.
Solid understanding of common web application vulnerabilities, exploitation techniques, and remediation options.
Knowledge of IT infrastructure, security engineering, system and network security, authentication protocols, and applied cryptography.
Experience with configuration management, system maintenance, integration testing, penetration testing, and vulnerability analysis.
Knowledge of system architectures and networking technologies, including client/server environments, web hosting, directory services, firewalls, WAN, MAN, LAN, switches, and routers.
Proficiency with macOS, Linux, and Windows operating systems.
Experience preparing professional penetration testing reports and presenting assessment results to clients.
Familiarity with industry-standard penetration testing methodologies, frameworks, and tools.
Excellent organizational, verbal, and written communication skills, including the ability to explain complex technical findings to nontechnical audiences.
Strong understanding of cybersecurity fundamentals, common vulnerabilities, attack methodologies, and remediation strategies.
Demonstrated experience in vulnerability discovery, security engineering, application security, and penetration testing.
Intermediate to advanced proficiency with virtualization and containerization technologies.
Strong analytical, critical-thinking, and problem-solving skills.
Ability to independently manage multiple client engagements, prioritize competing deadlines, and deliver high-quality results.
Strong attention to detail, particularly in documenting vulnerabilities, supporting evidence, and remediation recommendations.
Ability to work collaboratively in a remote, client-focused consulting environment.

Nice To Haves

Preferred Certification: Offensive Security Certified Professional (OSCP). Additional advanced cybersecurity certifications, including OSCE, GWAPT, GXPN, or CISSP, are a plus.
Experience with mobile applications, APIs, and cloud environments is a plus.

Responsibilities

Identify and disclose vulnerabilities and vulnerable components of a client infrastructure.
Execute webapp and network pen tests independently, providing clients the remediation guidance for all significant identified vulnerabilities.
Contribute to Assessment Research and Development initiatives (identifying new 0-day vulnerabilities, improving attack methodologies, improving penetration test tolling, etc.).
Develop and adhere to process documentation in support of cyber penetration testing execution.
Identify emerging security risks and collaborate with internal service teams and clients to develop appropriate mitigation strategies.
Configure and support various operating systems (Windows, Linux, UNIX, macOS), virtualization platforms (VMware, Xen, Hyper-V), and cloud environments (AWS, Azure) used in penetration testing.
Effectively assess and communicate security risks, business impact, and appropriate levels of urgency to stakeholders.
Participate in client engagement kickoff meetings, technical debriefings, and executive presentations.
Collaborate effectively with internal teams, external organizations, and client stakeholders throughout security assessment engagements.
Share knowledge, provide technical guidance, and train team members on penetration testing methodologies, tools, and best practices.
Support continuous improvement initiatives to enhance the effectiveness and efficiency of penetration testing services.
Perform other duties as assigned.

Benefits

Health, Dental & Vision Insurance (premiums paid up to 99% for employee coverage)
Options include, PPO, HDHP, HMO and ACO
Multiple carrier options
FSA (dependent and medical), HSA options (for qualified plans) and supplemental insurance options
$10,000 employer-paid Life Insurance & AD&D (employees have the option to buy up)
Paid holidays
Paid time off
Paid sick leave
Flexible “hybrid” work environment
Retirement plan (401K)
Professional training & development opportunities