Invictus International · 1 day ago
Penetration Tester
Invictus International is seeking a Penetration Tester to enhance the security posture of the FAA's Air Traffic Organization. The role involves performing penetration tests, simulating cyberattacks, and providing technical expertise in cybersecurity tools and exercises.
Security & Investigations
Responsibilities
Penetration Testing SME II performs penetration testing of the FAA's Air Traffic Organization, National Airspace System security posture to provide detailed analysis and identification of application, system, and network vulnerabilities; gaps in IT security guidance, and assessment of patching/mitigation methodologies
Tester acts as Ethical white hat attacker (red teamer) to simulate cyberattacks from a malicious actor, and/or Defensive cybersecurity personnel (blue teamer) to harden against simulated attacks
Develop ad coordinate penetration testing Rules of Engagement, System Test Plans, and Test Reports
Provide recommended remediation actions to lower overall risk exposure as required
Provide technical expertise on penetration testing tools and simulation environment
Provide technical expertise supporting cybersecurity exercise development and execution
Provide technical expertise supporting cybersecurity tool development and deployment
Qualification
Required
Bachelor's degree in an area related to the labor category and 4 years of relevant experience
At least one of the Red Teaming certifications or Blue Teaming Certifications; Offensive Security Certified Professional (OSCP), Offensive Security Certified Expert (OSCE), Offensive Security Wireless Professional (OSWP), Offensive Security Web Expert (OSWE), Certified Ethical Hacker (CEH), EC-Council Certified Security Analyst (ECSA), Licensed Penetration Tester (LPT), Certified Incident Handler (GCIH), Penetration Tester (GPEN), Web Application Penetration Tester (GWAPT), Exploit Researcher and Advanced Penetration Tester (GXPN), Assessing and Auditing Wireless Networks (GAWN), Certified Network Defender (CND), Certified Network Defense Architect (CNDA), Certified Intrusion Analyst (GCIA), Defending Advances Threats (GDAT), Defensible Security Architecture (GDSA), Certified Enterprise Defender (GCED), GIAC Certified Forensic Analyst
US citizenship is required