Penetration Tester

HIGHLY DESIRABLE CERTIFICATIONS

• OSCP
• GPEN
• Baseline Minimum certifications (CEH, CompTIA Security+, GWAPT, CompTIA PenTest+ acceptable)

KEY RESPONSIBILITIES PER PWS

• Minimum 3 - 5 years of hands-on penetration testing experience in a Federal or comparable environment
• Experience operating under defined Rules of Engagement (RoE) in a government or regulated environment
• Experience with penetration testing tools including but not limited to: Burp Suite Pro, Nessus, Kali Linux, Metasploit, Nmap, BloodHound, Cobalt Strike, Acunetix, Nikto, Dirbuster, and similar
• Experience with cloud provider penetration testing procedures including AWS, Azure, and Google Cloud testing authorization processes

STANDARDS & FRAMEWORKS

• NIST SP 800-115 Technical Guide to Information Security Testing and Assessment
• DHS OIG guidelines for conducting vulnerability assessments and penetration testing
• MITRE ATT&CK Framework
• OWASP Testing Guide
• Penetration Testing Execution Standard (PTES)