Penetration Tester

Leidos•Herndon, VA

6d•$131,300 - $237,350

About The Position

Leidos is seeking a Penetration Tester to support an enterprise IT program. We are looking for a cyber security professional to conduct penetration testing and ethical hacking, to target, assess, and exploit risk and vulnerabilities of information systems. This candidate is expected to have hands on penetration testing experience. In addition to technical skills, the candidate should be a self-starter who doesn’t always need to be provided direction. Critical thinking skills are a must; the Customer wants someone who can come up with ideas and investigate to validate those ideas as well as have a curiosity on the unknown and continuously push for outcomes. Primary Responsibilities: This team provides a highly technical and in-depth penetration testing service, in support of enterprise cyber security equities. The role requires support specializing in penetration testing and ethical hacking, to target, assess, and exploit risk and vulnerabilities of information systems. The intent is to provide senior decision makers with documented and actionable data to aid in making strategic investment decisions. The team will document all identified system risks, planned test procedures, and results; perform analyses of vulnerabilities identified during testing; and review program-level documentation (e.g., requirements specification, system architecture, design documents, test plans, security plans, etc.). They will recommend changes to program-level documentation with an eye to reducing system vulnerabilities, create and document penetration testing plans and procedures, and approved testing plans and procedures to conduct hands-on penetration testing. The team will also analyze test results, document risks, and recommend countermeasures to uncovered risks; participate or lead technical exchange meetings and application review boards; document action items and results from technical exchange meetings and application review boards; and brief management on the status of action items and results of activities.

Requirements

Must have an active TS/SCI with Poly to be considered
Must have a Bachelor's degree in Computer Science, Information Systems, Engineering, or other related scientific or technical discipline and at least 12 years of relatable experience OR Masters in Computer Science, Information Systems, Engineering, or other related scientific or technical discipline and at least 10 years of relatable experience.
Experience in cyber security or related IT field
Experience with cyber penetration testing
Experience applying computer attack methods and system exploitation techniques
Working knowledge of cyber security principles for Linux, Windows, and virtual platforms
Experience designing, testing, or implementing IT security architecture
Experience performing network security analysis
Experience analyzing network architectures
Experience using network management tools
Experience leveraging adversarial tactics to conduct hands-on security testing
Experience developing risk management methodologies
Experience analyzing test results to develop risk and threat mitigation plans
Experience testing or reviewing system configuration, development, and design specifically around enterprise systems and hypervisors
Experience designing, testing, or implementing complex Windows installations

Nice To Haves

Experience participating in public and private information security groups and organizations
Experience communicating vulnerability results and risk posture to senior executives
Experience researching, evaluating, and developing security policies and guidance
Experience performing complex technical tasks with minimal direction

Responsibilities

Conduct penetration testing and ethical hacking to target, assess, and exploit risk and vulnerabilities of information systems.
Document all identified system risks, planned test procedures, and results.
Perform analyses of vulnerabilities identified during testing.
Review program-level documentation (e.g., requirements specification, system architecture, design documents, test plans, security plans, etc.).
Recommend changes to program-level documentation with an eye to reducing system vulnerabilities.
Create and document penetration testing plans and procedures.
Conduct hands-on penetration testing.
Analyze test results, document risks, and recommend countermeasures to uncovered risks.
Participate or lead technical exchange meetings and application review boards.
Document action items and results from technical exchange meetings and application review boards.
Brief management on the status of action items and results of activities.