Apply on Employer Site

Open Systems Technologies Corporation · 2 months ago

Lead Penetration Tester

Annapolis Junction, MD

Full-time

Onsite

Senior Level

5+ years exp

Open Systems Technologies Corporation is a leader in the government contracting marketplace, providing Enterprise Security and Cloud Computing solutions. They are seeking a Lead Penetration Tester to join a high-performing agile team, responsible for the overall security of Enterprise-wide information systems and addressing cyber threats through various testing and response strategies.

ConsultingInformation TechnologySoftware

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Perform internal and external pentest against systems to determine vulnerabilities and offer mitigation strategies

Perform web app pentests

Perform vulnerability risk assessment

Perform physical pentests and social engineering

Perform cyber incident response as needed for programs

Qualification

Penetration TestingIT Security Risk AssessmentCyber Kill ChainWeb DevelopmentPythonBurp SuiteKaliIPS/IDS SolutionsCertificationsCollaborationProject ManagementAdaptabilityCommunicationProblem Solving

Required

CLEARANCE: TS/SCI w/FSP (must be from NSA). Must have a FS poly from the MD customer, last poly must be within the past 6 years, no CCAs

At least 5 years of relevant experience

Must have experience in web development and programming languages such as Java, XML, Perl and HTML

Must have extensive experience performing IT security risk assessments

Must have experience performing web app and physical pentests

Experience with programming/scripting in Python, Powershell, C, JavaScript, etc

Must have experience with or strong familiarity of the following Web Application tools; Burp Suite, Web Inspect, Appdetective

Must have experience with or strong familiarity of Kali

Must have experience with or strong familiarity of IPS/IDS solutions

Must have a strong understanding of the Cyber Kill Chain methodology

Must have the ability to effectively collaborate with technical staff and customers when necessary to form strategies and plan for continuous modernization and legacy integration

Must have experience managing multiple projects and quickly and effectively adjusting to shifting priorities and resolving issues

Preferred

BS in a related field and at least 8 years of relevant experience

Certifications in one or more of the following areas:

GIAC Web Applications Penetration Tester/GWAPT

GIAC Penetration Tester/GPEN

Certified Ethical Hacker/CEH

Certified Information Security Manager/CISM

Certified Web Application Defender/GWEB

Certified Information System Security Professional/CISSP

Benefits

3 weeks paid time off

11 Federal Holidays

Medical/dental coverage

STD

LTD

Life Insurance

AD&D

401k with up to 4% match

End-of-year profit sharing

Company

Open Systems Technologies Corporation

Glassdoor3.8

Open Systems Technologies (OST) Corporation is a technology solutions company that has been providing customized, high-end security solutions to large-scale enterprises since 1996.

Founded in 1996

Gainesville, Florida, USA

51-200 employees