Peraton · 2 days ago

Cloud Penetration Tester

United States

Full-time

Remote

Entry, Mid Level

$104K/yr - $166K/yr

2+ years exp

Maximize your interview chances

Information TechnologyRobotics

Actively Hiring

No H1B

U.S. Citizen Only

Security Clearance Required

Insider Connection @Peraton

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Conduct cloud adversarial emulation testing and assessments on VAEC resources.

Perform purple-team activities to identify and exploit vulnerabilities, ensuring they are remediated in a correct and timely manner.

Provide a weekly report detailing the number of planned tests, tests completed, and the outcomes of each test.

Support 3rd party purple team Cybersecurity Infrastructure Security Agency (CISA) assessments on VAEC resources.

Collaborate with cybersecurity engineers, analysts, and other stakeholders to ensure alignment and effective communication of findings.

Stay current with the latest cloud security trends, tools, and best practices to ensure the effectiveness of penetration testing activities.

Document and report vulnerabilities and provide recommendations for remediation to enhance the security posture of VAEC systems.

Support to baseline, track, and report audit effort to track the fully updated Inventory of Cloud systems and assets with corresponding system owners. Collect and track Metrics and Objectives & Key Results (OKRs) for cloud compliance with regard to security capabilities.

Support a Cloud Incident Response Plan (IRP) Preparedness/Tabletop Exercise Plan with identified gaps in people, processes, and technologies.

Support Cloud Vulnerability Scanning Services to include cloud system auditing, continuous vulnerability scanning of the systems is required to provide vulnerability scanning services support to identify all vulnerabilities.

Provide Cloud Adversarial Emulation Testing/Assessment to ensure that found vulnerabilities are remediated in a correct and timely manner. Support cloud purple-teaming on the resources identified during the planning phase with testing and assessments conducted with a priority of External resources. Support weekly Cloud Adversarial Emulation Testing/Assessment Report that provides the number of planned tests, tests completed, and the details and outcomes of each test.

Support review of the Cloud systems toolset configurations to ensure security standards and VA policy are being met.

Provide Cloud Cyber Monitoring and Incident Response to ensure ability to monitor for and respond to cybersecurity incidents affecting VAEC resources and the CSOC has the correct cloud detections and the resources to monitor those detections on 24/7/365 basis.

Provide support with VA CSOC's role in the development of the VA cybersecurity risk register to identify areas that would be most impacted by a cybersecurity incident.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Penetration TestingCloud EnvironmentsAdversarial Emulation TestingPurple-Teaming ActivitiesPenetration Testing ToolsCybersecurity PrinciplesAWSAzureMicrosoft 365OSCPGCPNGDAT