Senior Cybersecurity Penetration Tester

Intermountain Health•Lake Park, IA

3d•$49 - $78•Onsite

About The Position

The Cybersecurity-Senior designs, engineers, analyzes, and assesses key elements of Intermountain’s cybersecurity program. This role focuses on offensive security and penetration testing, independently conducting complex assessments across enterprise networks, applications, APIs, cloud environments, identity platforms, and other technology environments. The position identifies and validates vulnerabilities, analyzes attack paths and business impact, and provides actionable remediation guidance. The senior professional develops repeatable testing methodologies and uses manual and automated techniques, scripts, and offensive security tools. The role produces technically accurate reports and communicates findings to technical teams, cybersecurity leadership, and other stakeholders. It also provides technical guidance and mentoring to other cybersecurity professionals, supports relevant incident response and threat-driven investigations, and ensures all testing is authorized, scoped, documented, and conducted according to applicable policies and procedures. Senior-level professionals work independently with minimal oversight and may guide less experienced technical professionals.

Requirements

Bachelor’s degree from an accredited institution or an intermediate-level cybersecurity certification, such as SANS 500+ Series, CISA, or CISM.
5–8 years of related work experience.
Experienced skills in cybersecurity technologies, systems, and processes.
Advanced troubleshooting skills.
Experienced skills in analysis, attention to detail, problem resolution, judgment, and decision-making.
Experienced skills in communication, presentation, and collaboration.

Nice To Haves

Advanced cybersecurity certification, such as CISSP or SANS 500+ series.
Experienced knowledge of attestation and certification methodologies, such as SOC 2.
Experience in scripting and automation.
Experienced understanding of cybersecurity assessment tools and techniques.

Responsibilities

Plan, scope, and independently execute complex penetration testing engagements across enterprise networks, applications, APIs, cloud environments, identity platforms, and other technology environments.
Use manual and automated techniques to identify vulnerabilities, configuration weaknesses, attack paths, and opportunities for unauthorized access, privilege escalation, lateral movement, or compromise.
Conduct application and API security testing, including authentication, authorization, session management, input validation, business logic, and other security controls.
Perform internal and external network and infrastructure penetration testing, including reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, and authorized post-exploitation activities.
Conduct adversary simulations, assumed-breach exercises, and targeted assessments of preventive, detective, and responsive security controls.
Develop and maintain penetration testing methodologies, procedures, playbooks, standards, and repeatable assessment approaches.
Research emerging vulnerabilities, exploitation techniques, attacker tradecraft, and security technologies and apply relevant techniques to testing.
Develop and use scripts, automation, and offensive security tools to improve testing effectiveness, coverage, repeatability, and efficiency.
Analyze vulnerabilities for exploitability, attack paths, compensating controls, and potential business impact.
Produce technically accurate reports documenting scope, methodology, evidence, findings, risk, exploitation results, and actionable remediation recommendations.
Communicate technical findings and attack scenarios to technical teams, cybersecurity leadership, application owners, infrastructure teams, and other stakeholders.
Partner with application, infrastructure, cloud, identity, and cybersecurity teams to validate findings, advise on remediation, and retest corrective actions.
Serve as a senior technical resource for penetration testing and offensive security, providing technical guidance, peer review, and support to other cybersecurity professionals.
Review penetration testing evidence and findings for accuracy, reproducibility, risk characterization, and reporting quality.
Mentor less experienced penetration testers and cybersecurity professionals and help develop the team’s offensive security capabilities.
Support security incident response and threat-driven investigations requiring advanced offensive security expertise, exploitation analysis, or attack-path validation.
Ensure testing is authorized, scoped, documented, and conducted in accordance with organizational policies, rules of engagement, regulatory requirements, and established procedures.
Prioritize and execute multiple engagements and technical assignments independently with minimal oversight.