Job description
- Extensive experience leading authorized penetration testing, ethical hacking, red team assessments, and technical security testing across enterprise networks, applications, cloud environments, and infrastructure.
- Advanced hands-on experience with penetration testing tools such as Burp Suite, Metasploit, Nmap, Nessus, Kali Linux, Wireshark, and similar security assessment platforms.
- Expertise in web application and API penetration testing, OWASP Top 10 vulnerabilities, authentication weaknesses, privilege escalation, and security misconfiguration analysis.
- Experience conducting internal and external network penetration testing, Active Directory security assessments, cloud penetration testing, and controlled exploitation of identified vulnerabilities.
- Strong understanding of NIST SP 800-115, NIST SP 800-53A, MITRE ATT&CK, OWASP testing methodologies, and CISA High Value Asset assessment practices.
- Ability to develop penetration testing methodologies, rules of engagement, assessment schedules, test plans, and technical testing procedures.
- Experience preparing detailed penetration testing reports, risk-rated findings, proof-of-concept evidence, remediation recommendations, and executive-level assessment summaries.
- Proven ability to lead penetration testing teams, coordinate with System Owners and security assessors, validate remediation actions, and support federal security authorization activities.
first seen 2026-10-13 21:30:02 · last verified 2026-10-13 21:30:02
pentestcareers.com // breach the job market