Sr. Cyber Security Analyst - Penetration Tester

DPP•Columbia, SC

3d•Hybrid

About The Position

DPP is seeking a Sr. Cyber Security Analyst for an opportunity with our client in the healthcare insurance industry. This role involves planning and executing security tests against applications, systems, and infrastructure to uncover vulnerabilities before attackers do. The work utilizes Linux-based environments and tools such as Burp Suite, Metasploit, and Nessus for web application testing, vulnerability scanning, exploitation validation, and manual verification of findings. Responsibilities include reviewing scope, analyzing prior results, running scans, investigating weaknesses, and documenting evidence to determine real-world risk. The Cyber Threat Intelligence (SecOps) team is composed of experienced cybersecurity practitioners with expertise in penetration testing, assessment, threat hunting, forensics, and security operations. The team collaborates to support security testing, validate risk, and enhance the organization's security posture. This is an opportunity for individuals who value knowledge sharing, continuous learning, and high-quality security work within a collaborative environment.

Requirements

Linux
Penetration testing tools (e.g., BurbSuite, MetaSploit, Nessus)
Ability to perform manual testing against applications, systems, and infrastructure
Hands-on penetration testing expertise
Ability to validate, exploit, or explain the findings
Ability to distinguish false positives from legitimate security weaknesses or assess real-world risk
Strong verbal and written communication skills, with the ability to clearly explain security findings to both technical teams and non-technical stakeholders.
Ability to translate complex vulnerabilities into business-relevant risk and provide practical, understandable remediation guidance.
Professional presence and confidence when discussing assessment results, answering questions, and presenting recommendations.
Ability to document findings thoroughly, accurately, and in a polished manner suitable for reports and stakeholder communication.
8 years of job-related technical experience.
Bachelor’s degree in Computer Science, Information Technology, or other job-related degree; OR, Associates degree in CS, IT, or other job-related degree plus 2 years of work-related experience; OR, 4 years job-related work experience (total 12 years without a degree)
US Citizen: This role requires the ability to obtain a low-level (Public Trust) US security clearance, which requires a thorough background search and US citizenship. Residency requirements may apply.

Responsibilities

Planning and executing security tests against applications, systems, and infrastructure.
Using Linux-based environments and tools such as Burp Suite, Metasploit, and Nessus.
Performing web application testing, vulnerability scanning, exploitation validation, and manual verification of findings.
Reviewing scope, analyzing prior results, running scans, and investigating weaknesses.
Documenting evidence to determine real-world risk.
Collaborating with team members to support security testing initiatives.
Validating risk across applications and infrastructure.
Strengthening the organization’s overall security posture.
Sharing intelligence, techniques, and findings with team members.
Supporting one another in solving complex security problems.