Penetration Tester - US Remote

Motorola Solutions•Washington, DC

1d•Remote

About The Position

At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future. Department Overview As Motorola's premier cybersecurity consulting group, the cyber professional services team provides in-depth technical, compliance, and governance assessments as well as strategic recommendations for our customer’s and their networks, operational technology and installed Motorola products and platforms. The cyber professional services team provides a full spectrum of cybersecurity services ranging from physical security, vulnerability management, penetration testing, risk management and compliance with frameworks and benchmarks such as CJIS, CIS, ISO, and NIST. Job Description Cyber Penetration Tester providing our customers with cybersecurity consultative services to aid them in determining the effectiveness of their deployed Cybersecurity controls within Enterprise, Public Safety, P25, E911, Computer Aided Dispatch, Fixed Video and FedRAMP networks and products.

Requirements

Bachelor’s degree (or equivalent years’ experience 5+ in a Cyber role) in a technical field
Minimum of one (Pentest+, CEH, OSCP, OSWE and/or GPEN) certification required
2-5 years' experience in at least three of the following:
Network penetration testing and manipulation of network infrastructure
Web Application Penetration Testing
Email, phone, or physical social-engineering assessments
Shell scripting or automation of simple tasks using Perl, Python, or Ruby
Developing, extending, or modifying exploits, shellcode or exploit tools
Developing applications in C#, ASP, .NET, Objective C, Go, or Java (J2EE)
Reverse engineering malware, data obfuscators, or ciphers
Source code review for control flow and security flaws
Strong knowledge of tools used for wireless, web application, and network security testing
Thorough understanding of network protocols, data on the wire, and covert channels
Solid understanding of Unix/Linux/Mac/Windows operating systems, including bash and PowerShell
High School diploma, Bachelor’s degree in Cybersecurity, Computer Science, or Information Systems required.
Must be a U.S. citizen with the ability to obtain a Security Clearance as required by our government customers.
Legal authorization to work in the U.S. indefinitely is required.
Employer work permit sponsorship is not available for this position.

Nice To Haves

CEH, Pentest+, OSCP, OSCE, OSWE or SANS certification
Ability to travel up to 50%
Ability to successfully interface with clients (internal and external)
Ability to document and explain technical details in a concise, understandable manner
Ability to integrate Artificial Intelligence into the pentesting workflow to include vulnerability discovery, exploitation and assessment documentation generation.
Ability to manage and balance a team and your own time among multiple tasks

Responsibilities

Proficiency in executing comprehensive web application penetration testing is required.
Understand and safely use various open-source penetration testing tools and when appropriate, emulating hacker tactics, techniques, procedures (TTPs).
Develop comprehensive and accurate reports and presentations for various consumers of penetration testing results.
Experience with security testing and configuration review of major cloud platforms (e.g., AWS, Azure) preferred.
Familiarity with cloud computing concepts and security models, including IaaS, PaaS, and serverless architectures.
Understanding and practical application of the MITRE ATT&CK framework for analyzing adversary TTPs.
Estimated workload is 3-4 assessments per quarter, consisting of 1-2-week assessments including report writing, maintaining a 70% billable utilization.