Penetration Tester

Dark Wolf Solutions•Salt Lake City, UT

14h•Onsite

About The Position

Dark Wolf is looking for a Penetration Tester who will plan and perform continuous cross-domain vulnerability assessments, full-scale penetration testing and red team operations. The ideal candidate must display familiarity with both cloud-based and on-premises Windows, Linux and mobile operating systems and environments and be able to conduct network and application security vulnerability analysis. The candidate will analyze both commercial and federal mission systems to help identify potential vulnerabilities and help to provide and implement remediation strategies to customers for these issues. The successful candidate must have prior experience with multiple facets of penetration testing, using and ideally developing or contributing to both open source and proprietary tools. Conducts open-source research on clients and their infrastructure to help identify data leakage that could lead to vulnerabilities. Leverages programming knowledge to develop custom tools and exploits both for targeting unique client systems and building internal testing capabilities. Prepares assessments and presentations of analyses and findings. Develops and maintains analytical procedures to meet changing requirements and ensure effective operations. This position requires full-time onsite work at Hill Air Force Base in Ogden, UT.

Requirements

3+ years’ experience in three or more specific areas to include: intelligence analysis, network engineering, networking security, penetration testing, red team operations, hardware engineering, software engineering, exploit development, reverse engineering, vulnerability assessment, physical security assessments, social engineering
Strong knowledge of testing simulated intrusion attempts and physical penetration testing
Proficiency in the testing and assessment of mobile operating systems, embedded systems and/or IoT devices
Familiarity with unmanned aerial vehicles and associated mobile and wireless technologies
Proficiency of various operating systems: Windows, iOS, Android, Mac or Linux
Proficiency with cloud technology and deployments: Amazon Web Services, Microsoft Azure, Google Cloud Platform
Moderate competency in at least one scripting and/or coding language
Working knowledge of software development, with preference for experience working around software development teams and efforts
Experience in network analysis methodologies
Experience in drafting reports, documenting case details, and being able to summarize findings and recommendations based on system analysis
Demonstrated strong written and verbal communication skills
BS (or equivalent) in Cybersecurity, Information Security, IT, EE, Network Engineering, Computer Science, or related field
Willingness to travel
US Citizenship and an active Top Secret/SCI security clearance required

Nice To Haves

Familiarity with container technologies to include container orchestration and microservices
Experience with DevSecOps and adjacent tools; strong preference for experience with Kubernetes, software development pipelines
Security Certification: CEH, OSCP, PNPT or similar security/pentesting certs
Experience employing advanced forensic tools and techniques for attack reconstruction, including dead system analysis and volatile data collection and analysis
Experience in performing post-incident computer forensics without destruction of critical data.
Desired experience ensuring quality assurance and the spreading of best practices
MS degree in technical field
Security+ Certification

Responsibilities

Plan and perform continuous cross-domain vulnerability assessments, full-scale penetration testing and red team operations.
Conduct network and application security vulnerability analysis.
Analyze commercial and federal mission systems to identify potential vulnerabilities.
Provide and implement remediation strategies to customers.
Conduct open-source research on clients and their infrastructure to identify data leakage.
Develop custom tools and exploits for targeting unique client systems and building internal testing capabilities.
Prepare assessments and presentations of analyses and findings.
Develop and maintain analytical procedures.
Lead the technical aspect of a specific, long-term penetration testing effort.
Conduct varied testing efforts against applications and networks for the federal government.
Develop a continuous campaign-based assessment that emulates the target’s real-world adversaries by developing new tools specific to the target.
Integrate into ongoing testing efforts, requiring subject matter expertise in multiple disciplines of vulnerability testing and assessment.
Interact and liaison directly with clients.
Write and document findings.