Penetration Tester II

Job Role : Penetration Tester II Location : Remote or Washington, DC preferred Years Experience/Focus Required : At least three (3) years of pen test experience Degree Requirements : Bachelor's Degree Certification Requirements : Must have at least a GPEN or CEH certification in addition to one of the following certifications: GRTP, CRTL, OSCP, CRTP, CMWAPT, CEPT, CPT, LPT

Must have or able to obtain CISA AES HVA Operator certification Security Clearance Requirements : Secret (Active) Additional Experience/Skills : Experience in management/supervision of a previous Intel Community (IC) role,

managing projects and tasks against tight deadlines.

Experience with the cyber intelligence lifecycle

Knowledge of MITRE ATT&CK and D3FEND frameworks.

Skill in generating queries and reports.

Experience with threat intelligence technologies, including graphing and link

analysis tools

Experience in Cyber Threat Intelligence concepts and implementation

Experience with utilizing threat intelligence to conduct technical analysis

of enterprise assets.

Experience with the Diamond Model of Intrusion Analysis, and creating

reports based on the analysis.

Experience in cyber intrusion kill chain concepts and implementation.

Experience with enrichment of monitoring and detection capabilities with

cyber threat intelligence data.

Ability to interpret and incorporate data from multiple sources into threat briefings

and contribute to long range strategic threat assessment reports for leadership

Knowledge related to the current state of cyber adversary tactics and trends.

Knowledge of threat actor Indicators of Compromise (IOC) and Indicators of

Attack (IOA).

Ability to create trend reporting of threat actors TTPs as it relates to the ICE

mission.

Knowledge of vulnerability management, cyber threat hunting, penetration testing,

security operations and incident response processes.

Experience creating Cyber Threat Intelligence products and white papers

in clear language and experience briefing presentations to senior

leadership/C-suite level and higher at both classified and unclassified

levels.

Experience with creating threat matrices to support Security Control

Assessment Reporting.