Penetration Tester

Dark Wolf Solutions•Salt Lake City, UT

17h•Hybrid

About The Position

Dark Wolf is seeking a Penetration Tester to plan and perform continuous cross-domain vulnerability assessments, full-scale penetration tests, and red team operations. The role assesses commercial and federal mission systems, identifies potential vulnerabilities, and helps customers develop and implement remediation strategies. The candidate will conduct open-source research on clients and their infrastructure to identify data leakage, use programming skills to develop custom tools and exploits, and prepare assessment reports and presentations. The role also involves developing and maintaining analytical procedures as requirements change. Candidates may move between projects, participating in single-engagement penetration tests or continuous red team efforts. The position primarily leads the technical work for a specific long-term penetration testing effort, conducting varied application and network tests for the federal government. Red team assignments may involve building continuous, campaign-based assessments that emulate real-world adversaries and developing tools specific to the target. The successful candidate will integrate into ongoing testing, provide expertise across vulnerability testing and assessment disciplines, liaise directly with clients, and document findings. Occasional travel is required for clients who need onsite testing. This is a hybrid position based at Hill Air Force Base in Ogden, Utah. Relocation assistance and sign-on bonuses of up to $25,000 are available, commensurate with skills and experience.

Requirements

At least 3 years of experience in three or more of the following areas: intelligence analysis, network engineering, network security, penetration testing, red team operations, hardware engineering, software engineering, exploit development, reverse engineering, vulnerability assessment, physical security assessments, or social engineering.
Strong knowledge of testing simulated intrusion attempts and physical penetration testing.
Proficiency in testing and assessing mobile operating systems, embedded systems, and/or IoT devices.
Familiarity with unmanned aerial vehicles and associated mobile and wireless technologies.
Proficiency with Windows, iOS, Android, Mac, or Linux operating systems.
Proficiency with cloud technologies and deployments, including Amazon Web Services, Microsoft Azure, or Google Cloud Platform.
Moderate competency in at least one scripting or coding language.
Working knowledge of software development; experience working with software development teams and efforts is preferred.
Experience with network analysis methodologies.
Experience drafting reports, documenting case details, and summarizing findings and recommendations based on system analysis.
Strong written and verbal communication skills.
Bachelor's degree or equivalent in Cybersecurity, Information Security, IT, Electrical Engineering, Network Engineering, Computer Science, or a related field.
Willingness to travel occasionally.
U.S. citizenship and an active Secret clearance, with the ability to be upgraded to Top Secret.

Nice To Haves

Familiarity with container technologies, including container orchestration and microservices.
Experience with DevSecOps and related tools; strong preference for Kubernetes and software development pipelines.
CEH, OSCP, PNPT, or similar security or penetration testing certification.
Experience using advanced forensic tools and techniques for attack reconstruction, including dead system analysis and volatile data collection and analysis.
Experience performing post-incident computer forensics without destroying critical data.
Experience ensuring quality assurance and spreading best practices.
Master's degree in a technical field.
Security+ certification.

Responsibilities

Plan and perform continuous cross-domain vulnerability assessments, full-scale penetration tests, and red team operations.
Assess commercial and federal mission systems to identify vulnerabilities and help customers implement remediation strategies.
Conduct open-source research on clients and their infrastructure to identify data leakage that could lead to vulnerabilities.
Develop custom tools and exploits for unique client systems and internal testing capabilities.
Prepare assessments and presentations of analyses and findings.
Develop and maintain analytical procedures to meet changing requirements and ensure effective operations.
Lead the technical aspects of long-term penetration testing efforts, including varied application and network testing for the federal government.
Develop continuous, campaign-based red team assessments that emulate real-world adversaries and create tools specific to targets, when assigned to red team projects.
Integrate into ongoing testing efforts, provide subject matter expertise across vulnerability testing disciplines, liaise with clients, and document findings.
Travel occasionally for client onsite testing.