Penetration Tester

Job Description

Title: Penetration Tester

Location: Albany NY

Duration: Long Term

Client: State of NY

Scope Summary:

- End-to-end penetration testing of NYSIF systems

- External black box + internal grey box testing

- Covers hybrid environment: on-prem (servers, network, firewalls) + cloud (AWS, Azure, Google Cloud Platform)

- Key phases:

- Planning define scope, rules, targets

- Discovery identify vulnerabilities

- Attack exploit weaknesses

- Reporting document findings & remediation

- Estimated duration: 3 weeks

Key Requirements / Red Flags:

- Experience with tools: Metasploit, Nmap, Wireshark, Nessus, Burp Suite

- Proven hybrid environment testing (cloud + on-prem)

- Must submit 3 similar past projects

- Staff requirements:

- Minimum 2 years experience

- Certifications (CEH, CISSP, GPEN, OSCP, CISA, etc.)