Apply on Employer Site

TekSynap · 1 week ago

Penetration Tester w/ Secret Clearance

United States

Full-time

Onsite

Senior Level

6+ years exp

TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need for a comprehensive information management environment. They are seeking a Penetration Tester to independently perform penetration testing and vulnerability assessments for the Defense Logistics Agency (DLA), while also developing mitigation strategies to enhance cybersecurity posture.

ComputerInformation ServicesInformation Technology

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Independently perform penetration testing of applications, systems, and enclaves managed by the Defense Logistics Agency (DLA)

Conduct application and network penetration testing, wireless security assessments, and vulnerability identification

Apply offensive cybersecurity testing techniques using industry-standard tools and methodologies

Coordinate penetration testing projects with internal stakeholders and external system owners

Identify, document, and report security flaws in computing platforms, applications, and enterprise networks

Develop and recommend mitigation strategies to address identified cybersecurity risks and strengthen enterprise security posture

Prepare comprehensive assessment reports that detail findings, risk severity, and recommended remediation

Support continuous improvement of testing processes and contribute to the adoption of open security testing standards (e.g., OWASP)

Provide technical expertise to management and customers through oral presentations, briefings, and written deliverables

Qualification

Penetration TestingVulnerability AssessmentsNessusMetasploitWindows ServerLinux AdministrationPCI DSS TestingTCP/IP ProtocolsScriptingOWASPWireless LAN Security TestingOral Presentation SkillsWritten Documentation Skills

Required

Minimum six (6) years of experience performing vulnerability assessments and penetration testing

Minimum three (3) years of experience with testing tools such as Nessus, Metasploit, CANVAS, Nmap, Burp Suite, and Kismet

Minimum three (3) years of experience conducting network vulnerability assessments and penetration testing methodologies

Minimum three (3) years of experience developing detailed assessment and testing reports

Minimum two (2) years of experience administering and troubleshooting Windows Server and IIS environments

Minimum two (2) years of experience administering and troubleshooting major Linux distributions

Minimum two (2) years of PCI DSS testing experience

Familiarity with TCP/IP protocols, networking architectures, database, applications, and web server design

Experience scripting in: Perl, Python, Ruby, Bash, or Java

Experience performing wireless LAN security testing

Knowledge of open security testing standards and projects including OWASP

Knowledge of database, applications and Web server design and implementation

Excellent written documentation and oral presentation skills

DoD 8570 IAM Level III Baseline Certification: Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Chief Information Security Officer (CCISO)

Must hold a penetration testing certification, such as: Licensed Penetration Tester (LPT), Certified Expert Penetration Tester (CEPT), Certified Ethical Hacker (CEH), GIAC Penetration Tester (GPEN), OR have a minimum of eight (8) years of penetration testing experience

Secret – IT-II (Tier 3) Non-Critical Sensitive Clearance with a favorable NACLC