Penetration Tester

Specialized Security Services, Inc.•Plano, TX

About The Position

Specialized Security Services, Inc. is hiring a Penetration Tester (Ethical Hacker) to work on a range of client engagements and support organizations in strengthening their security posture. The role identifies and exploits vulnerabilities in networks, applications, and systems by simulating real-world cyberattacks, then tests, documents, and reports security weaknesses and recommends remediation strategies. The tester works with team members and clients on penetration testing and vulnerability management engagements, following S3 Security methodologies based on regulatory and industry requirements, standards, and security best-practice frameworks. As a trusted client advisor, the Penetration Tester provides objective testing and reporting that supports risk-based security decisions. The position also involves contributing to security architecture and standards, maintaining relevant certifications, and pursuing additional certifications as the cybersecurity landscape evolves.

Requirements

At least 2 years of professional experience in a penetration testing role.
Deliver quality reports and services efficiently and on time.
Well-versed in penetration testing, particularly web applications and internal and external networks.
Problem-solving skills and the ability to work under pressure in a fast-paced environment.
Experience with security hardening techniques and policy development, particularly secure software development methodologies and processes.
In-depth knowledge of Windows, Linux, and UNIX operating systems.
Advanced knowledge of principles, best-practice architecture, and design approaches for applicable capabilities, services, and standard controls.
Experience with one or more IT security compliance frameworks, such as PCI, NIST, ISO, or CIS.
Hands-on experience with security systems, including firewalls, intrusion detection systems, antivirus software, authentication systems, log management, and content filtering.
Professionalism when working internally and with clients.
A university degree in Computer Science, Engineering, or a related field, or related work experience.
Obtain additional certifications as required to keep pace with the cybersecurity threat landscape and industry-accepted certifications.

Nice To Haves

Offensive Security certifications such as OSCP, OSWE, OSEP, or OSCE.
CREST certifications such as CRT, CCT INF, CCT APP, CCRTS, or CCSAS.
EC-Council CPENT or WAHS certifications.
SANS GIAC certifications such as GXPN, GCPN, GPYC, GPEN, GWAPT, GRTP, or GX-PT.
Certified Ethical Hacker (CEH).
Experience with vulnerability management or assessment tools.
Experience with penetration testing tools.

Responsibilities

Conduct penetration tests across networks, web applications, APIs, cloud environments, databases, OT, wireless, mobile, social engineering, and other areas; perform code reviews, red-team engagements, and physical security assessments.
Conduct security assessments across a wide variety of technologies and implementations.
Simulate sophisticated cyberattacks for clients worldwide.
Share knowledge and methodologies as part of a global team of penetration testers.
Run penetration test projects with minimal oversight.
Perform vulnerability assessments, ethical hacking, firewall assessments, and social engineering engagements.
Manage priorities and tasks to achieve utilization targets.
Advise clients on technical security and compliance activities.
Write comprehensive reports documenting assessment findings and outcomes, and proposing further security enhancements.
Participate in developing and implementing enterprise security architecture and supporting security standards to ensure compliance with corporate policies and applicable legislative and regulatory requirements.
Handle or escalate client- and project-related issues in a timely manner.
Collaborate with business operations, digital business teams, and quality assurance to drive customer satisfaction.
Pursue additional industry-relevant certifications to maintain advanced proficiency and stay current with emerging threats.
Maintain certifications active at the time of hire and certifications obtained during employment.
Perform other duties as assigned.