NIH - Penetration Tester

cFocus Software Incorporated•Bethesda, MD

2d•Remote

About The Position

cFocus Software is seeking a Penetration Tester to join our program supporting the National Institutes of Health (NIH). This position is fully remote and requires a Public Trust clearance or the ability to obtain one.

Requirements

Public Trust Clearance
B.S. Computer Science, Information Technology, or a related field
5+ years of experience conducting penetration testing or offensive cybersecurity operations.
Experience performing enterprise penetration testing.
Experience with network and application security assessments.
Experience documenting technical security findings.
Ability to obtain and maintain NIH suitability/background investigation.
Active OSCP, OSEP, GPEN, GXPN, CEH, PenTest+, or CISSP

Responsibilities

Conduct enterprise penetration testing activities including: Perform internal and external network penetration testing.
Conduct web application penetration testing.
Execute infrastructure security testing.
Perform cloud penetration testing.
Conduct operating system security assessments.
Perform wireless security testing.
Assess Active Directory security.
Conduct application security testing.
Simulate real-world cyberattacks using industry-standard offensive security methodologies.
Perform controlled exploitation activities to identify security weaknesses.
Validate effectiveness of implemented security controls.
Identify attack paths and privilege escalation opportunities.
Document technical findings and supporting evidence.
Prepare comprehensive penetration testing plans
Provide Red Team Support