Penetration Tester

Dark Wolf Solutions•Ogden, UT

1d•Hybrid

About The Position

Dark Wolf is seeking a Penetration Tester to plan and perform continuous cross-domain vulnerability assessments, full-scale penetration tests, and red team operations. The role analyzes commercial and federal mission systems, identifies vulnerabilities and potential data leakage, and helps develop and implement remediation strategies. The candidate will use and may develop or contribute to open-source and proprietary tools, including custom tools and exploits for unique client systems and internal testing capabilities. The position also involves preparing assessment reports and presentations, documenting findings, and maintaining analytical procedures as requirements change. Candidates may move between projects, working on individual penetration tests or continuous red team engagements. The position primarily leads the technical work for a long-term penetration-testing effort, conducting varied application and network testing for the federal government. Red team assignments may involve developing campaign-based assessments that emulate real-world adversaries and creating tools specific to a target. The role requires integrating into ongoing testing efforts, applying expertise across vulnerability-testing disciplines, liaising directly with clients, and clearly documenting findings. Occasional travel is required for clients needing onsite testing. This is a hybrid position based at Hill Air Force Base in Ogden, Utah. Relocation assistance and sign-on bonuses up to $25,000 are available, commensurate with skills and experience.

Requirements

At least 3 years of experience in three or more of the following areas: intelligence analysis, network engineering, network security, penetration testing, red team operations, hardware engineering, software engineering, exploit development, reverse engineering, vulnerability assessment, physical security assessments, or social engineering.
Strong knowledge of testing simulated intrusion attempts and physical penetration testing.
Proficiency in testing and assessing mobile operating systems, embedded systems, and/or IoT devices.
Familiarity with unmanned aerial vehicles and associated mobile and wireless technologies.
Proficiency with one or more of Windows, iOS, Android, Mac, or Linux operating systems.
Proficiency with cloud technology and deployments, including Amazon Web Services, Microsoft Azure, or Google Cloud Platform.
Moderate competency in at least one scripting and/or coding language.
Working knowledge of software development; experience working with software development teams and efforts is preferred.
Experience with network analysis methodologies.
Experience drafting reports, documenting case details, and summarizing findings and recommendations based on system analysis.
Strong written and verbal communication skills.
BS or equivalent in Cybersecurity, Information Security, IT, Electrical Engineering, Network Engineering, Computer Science, or a related field.
Willingness to travel occasionally.
U.S. citizenship and an active Secret clearance, with the ability to be upgraded to Top Secret.

Nice To Haves

Familiarity with container technologies, including container orchestration and microservices.
Experience with DevSecOps and related tools; strong preference for experience with Kubernetes and software development pipelines.
Security certification such as CEH, OSCP, PNPT, or a similar security or penetration-testing certification.
Experience using advanced forensic tools and techniques for attack reconstruction, including dead-system analysis and volatile-data collection and analysis.
Experience performing post-incident computer forensics without destroying critical data.
Experience ensuring quality assurance and spreading best practices.
MS degree in a technical field.
Security+ certification.

Responsibilities

Plan and perform continuous cross-domain vulnerability assessments, full-scale penetration tests, and red team operations.
Analyze commercial and federal mission systems to identify vulnerabilities and assist customers with remediation strategies.
Conduct open-source research on clients and their infrastructure to identify data leakage that could lead to vulnerabilities.
Use, develop, or contribute to open-source and proprietary testing tools; develop custom tools and exploits for unique client systems and internal testing capabilities.
Lead the technical aspects of a long-term penetration-testing effort, including varied testing of federal-government applications and networks.
Develop continuous, campaign-based red team assessments that emulate target adversaries and create tools specific to the target, when assigned.
Integrate into ongoing testing efforts and liaise directly with clients.
Prepare assessment reports and presentations, document findings, and summarize analysis and recommendations.
Develop and maintain analytical procedures to meet changing requirements and support effective operations.
Travel occasionally for clients requiring onsite testing.