Senior Penetration Tester Security Clearance

Position: Senior Penetration Tester with Security Clearance
About Agile Defense At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.

Requisition #: 1697

Job Title:

Senior Penetration Tester

Location:

Remote Clearance Level: Public Trust, Must Have Ability to Obtain a Clearance

Job Description Agile Defense is currently seeking Penetration Testers to support an Agency-level Cybersecurity program. The position will join the team of testers that currently conduct ongoing enterprise-level penetration testing. To support this vital mission, AD staff are on the forefront of providing Advanced Cyber Network Defense Operations support to include the development of advanced analytics and countermeasures to protect critical assets from hostile adversaries.

To ensure the integrity, security, and resiliency of critical operations, we are seeking candidates with diverse backgrounds in cyber security systems operations, threat analysis, continuous monitoring, vulnerability assessment, and penetration testing. Candidates must have strong written and verbal communications skills, researching and analysis skills, and attention to detail. The ideal candidate will have a solid understanding of operating system and application vulnerabilities, exploits, technical report writing, and hands-on experience conducting web application penetration testing.

Corporate duties such as solution/proposal will also be required. The program is currently operating remotely but will be performed onsite in Alexandria, VA when directed to do so by the customer. Position is contingent on successfully completing a program-based background investigation.

Job Duties:

* Conduct web application and API database penetration testing efforts.
* Analyze application workflows, API endpoints, authentication mechanisms, and authorization controls to identify security weaknesses and business logic flaws.
* Coordinate with system owners, developers, and security personnel to communicate findings and support remediation efforts.
* Conduct validation testing of potentially remediated vulnerabilities.
* Draft and review analysis reports resulting from penetration testing.
* Stay current with emerging security threats, vulnerabilities, attack techniques, and mitigation strategies relevant to penetration testing.
* Collaborate with fellow assessment and agency Cybersecurity personnel on enterprise security initiatives and testing operations.
* Analyzes for weaknesses in company systems. Devises tests and scenarios for various penetration tests.
* Documents results and communicates them to engineers and management.
* Provides recommendations for new technologies and system designs according to test results.
* Develops automated testing programs where possible and efficient. Education and Background Typically has a bachelor degree, and 4-5 years of experience, or equivalent relevant work experience; e.g., each year of work experience may be substituted for each year of education required. Years of Experience 4-5 years Required Skills
* A minimum of 3 years of experience with assessing APT threats, Penetration Testing, Vulnerability Management, attack methodologies, malware analysis, attack surface comprehension, Cyber Threat Emulation operations, Cyber Advanced Threat Emulation Team operations and research, identification, and verification of new APT TTPs.
* Familiarity with API testing methodologies including REST, SOAP, JSON, XML, and authentication/token-based workflows.
* Understanding of OWASP Top 10, API Security Top 10, and common web application attack vectors.
* Experience writing technical security assessment reports and communicating findings to both technical and non-technical stakeholders
* Experience with Kali Linux, Metasploit,…