Exploitation Analyst/Penetration Tester

Harmonia Holdings Group•Martinsburg, WV

2d•Remote

About The Position

As a Penetration Tester, you will play a crucial role in proactively discovering vulnerabilities in systems and on the Department of Veterans Affairs networks. Your primary focus is completing time-based penetration tests to support the Authority to Operate (ATO) approval process for System Owners.

Requirements

Bachelor’s degree (8 years of additional relevant experience may be substituted for education)
1-4 years of experience in IT functions like network administration, engineering, or security
1 year of experience supporting offensive cybersecurity roles
Experience with the following:
Support Windows, Unix, and Linux operating systems
VMWare
Kali Linux Suite
Nessus Scanner (Tenable)
RedHat Enterprise Linux
NMAP
Ability to conduct scripting in bash and PowerShell

Nice To Haves

OSCP
PNPT
Pentest+
CISSP
CEH

Responsibilities

Perform penetration testing against various systems, which may include web applications, databases, web services, network devices, operating systems, cloud installations, and infrastructure (hardware) devices.
Utilize a variety of industry standard security tools to conduct manual-based security assessments.
Review new vulnerabilities as they are published and develop impact assessments.
Determine risk from vulnerabilities based on availability of exploit and potential loss of information and IT services capabilities.
Produce periodic trending and impact reports as required.
Generate reports (automated and manual) based on results from assessments and explain in detail to customers.
Develop new testing techniques and programs to support the Penetration testing team.
Manage and maintain hardware and software with an ability to provide infrastructure maintenance support to attack systems.
Knowledge and experience with processes and procedures relating to information gathering, threat modeling, vulnerability analysis, exploitation, post-exploitation, and reporting.
May be required to work outside normal duty hours to perform assessments on certain systems.

Benefits

Traditional and HSA- eligible medical insurance plans w/ Wellness Incentives for employees and family
100% employer-paid dental and vision insurance options
100% employer-sponsored STD, LTD, and life insurance
Veterans Cohort
Gym membership reimbursement
401(k) matching
Dollar-for-dollar 501(c)(3) donation matching
Flexible-schedules and teleworking options
Paid holidays and Flexible Paid Time Off
Adoption Expense Reimbursement
Paid Parental Leave
Professional development and career growth opportunities and paid training days
Employer-sponsored Employee Assistance Program for employee and family
Team and company-wide events, recognition, and appreciation