Senior Penetration Tester
Strata Information GroupFull Time
Senior (5 to 8 years)
Candidates must possess US Citizenship and be eligible for a US Government background investigation. A Bachelor's Degree in Cybersecurity or a related field is preferred, along with at least 2 years of experience in penetration testing or red-team assessments. Familiarity with SCAP, CVE, CVSS, CWE, CPE, USGCB, STIGs, NSA Guides, NCP, or Common Secure configurations is required. Experience with NMAP, BurpSuite, CrackMapExec, BloodHound, Ansible, Terraform, Git, and AWS is also necessary. While not required, the Offensive Security Certified Professional (OSCP) certification and related knowledge are highly preferred.
The Senior Penetration Tester will conduct penetration tests on web applications, APIs, networks, and cloud environments, simulating advanced persistent threat attacks. Responsibilities include assessing target systems, identifying and safely exploiting vulnerabilities, and analyzing Proof of Concept exploits. The role involves automating red teaming and penetration testing techniques using scripting languages like Golang, Python, JavaScript, Bash, or PowerShell. Additionally, the tester will perform security assessments of cloud environments, conduct source code reviews, and execute tests according to methodologies such as OWASP, NIST, and PTES. They will utilize custom tools, frameworks, and infrastructure, assess the risk of discovered vulnerabilities, and document findings in technical reports with remediation recommendations. Collaboration with clients on assessment status and vulnerability information is also a key duty, along with evolving the company's capabilities and toolset.
Unified defensive and offensive cybersecurity solutions
UltraViolet Cyber focuses on enhancing cybersecurity for organizations by integrating both defensive and offensive security operations. Their main services include Managed Detection and Response (MDR), which provides continuous monitoring and response to cyber threats, and Penetration Testing as a Service, where they simulate cyber attacks to find and fix vulnerabilities. This company stands out from competitors by combining the expertise of Red Team (offensive) and Blue Team (defensive) professionals, ensuring that security measures are both proactive and reactive. The goal of UltraViolet Cyber is to help organizations improve their resilience against cyber threats and protect their sensitive data and infrastructure effectively.