NIH - Penetration Tester

cFocus Software seeks a Penetration Tester to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance.

• Public Trust Clearance
• B.S. Computer Science, Information Technology, or a related field
• 5+ years of experience conducting penetration testing or offensive cybersecurity operations.
• Experience performing enterprise penetration testing.
• Experience with network and application security assessments.
• Experience documenting technical security findings.
• Ability to obtain and maintain NIH suitability/background investigation.
• Active OSCP, OSEP, GPEN, GXPN, CEH, Pen Test+, or CISSP

• Conduct enterprise penetration testing activities including:
  • Perform internal and external network penetration testing.
  • Conduct web application penetration testing.
  • Execute infrastructure security testing.
  • Perform cloud penetration testing.
  • Conduct operating system security assessments.
  • Perform wireless security testing.
  • Assess Active Directory security.
  • Conduct application security testing.
  • Simulate real-world cyberattacks using industry-standard offensive security methodologies.
  • Perform controlled exploitation activities to identify security weaknesses.
  • Validate effectiveness of implemented security controls.
  • Identify attack paths and privilege escalation opportunities.
  • Document technical findings and supporting evidence.
• Prepare comprehensive penetration testing plans
• Provide Red Team Support