Penetration Tester

Skyline Technology Solutions, LLC•Glen Burnie, MD

3d•$125,000 - $150,000•Hybrid

About The Position

We are seeking an experienced Penetration Tester to conduct and support security assessments of network-connected devices and technologies, with an emphasis on Intelligent Transportation Systems (ITS) and transportation infrastructure. The role focuses on identifying and validating security vulnerabilities through hands-on laboratory testing, evaluating device security configurations and controls, and providing clients with actionable, risk-based remediation recommendations. The position allocates approximately 60% of time to penetration testing and 10% each to project coordination and tracking, reporting quality assurance, serving as a cybersecurity subject matter expert, and personal growth and development. The role is hybrid.

Requirements

At least 5 years of relevant cybersecurity experience, including hands-on penetration testing experience.
Experience with tools such as Burp Suite Professional, Ghostwriter, and n8n.
Scripting experience with Perl, Python, JavaScript, and bash.
Demonstrable Linux proficiency with CentOS, Ubuntu, Debian, and RedHat.
Strong hands-on proficiency with Burp Suite, including Proxy, Repeater, Intruder, and other tools used for manual web application and API security testing.
Ability to analyze HTTP/HTTPS requests and responses, manipulate application traffic, and identify vulnerabilities in authentication, session management, and access controls.
Familiarity with vulnerability classification, severity scoring, and cybersecurity frameworks such as NIST, CVSS, and CWE.
Experience documenting technical security findings and developing professional penetration test reports.
Strong analytical, troubleshooting, and technical communication skills.
Ability to work independently while collaborating with a team to meet project objectives.

Nice To Haves

Bachelor’s degree in Cybersecurity, Information Systems, or a related field is preferred; equivalent work experience is accepted.
Relevant security certifications such as OSCP, GPEN, or PNPT, or equivalent practical experience.

Responsibilities

Conduct penetration tests and security assessments of network-connected devices, embedded systems, web-based management interfaces, APIs, and supporting technologies.
Perform manual and automated testing to identify, analyze, and validate vulnerabilities, including weaknesses in authentication, authorization, session management, input validation, network services, and access controls.
Evaluate device configurations and security controls against industry best practices and applicable security standards.
Use security tools, scripting languages, and established testing methodologies to perform thorough and repeatable assessments.
Document testing activities, technical evidence, confirmed vulnerabilities, associated risks, and actionable remediation recommendations in professional reports.
Communicate technical findings and risk-based recommendations to technical and non-technical stakeholders.
Collaborate with team members to investigate complex vulnerabilities and improve testing procedures, methodologies, and technical capabilities.
Research emerging vulnerabilities, attack techniques, security risks, and advances in penetration-testing tools and methodologies relevant to assessed technologies.
Coordinate and track projects, perform reporting quality assurance, contribute cybersecurity subject-matter expertise, and pursue personal growth and development. (Each listed as 10% of time.)