Part-Time Sr. Penetration Tester

COMPANY OVERVIEW

Join our award-winning team at Information Management Resources, Inc. (IMRI), a small business leader in the technology industry known for our commitment to innovation, excellence, and authenticity. Founded in 1992, IMRI has been at the forefront of delivering advanced cybersecurity and IT solutions, safeguarding organizations against evolving threats. We have built a reputation for our expertise in Cybersecurity, Digital Transformation, Strategic Business Consulting, and Staff Augmentation.

Guided by our core values of innovation, excellence, and a solution-driven mindset, we have served a diverse portfolio of customers that includes federal agencies, state and local governments, and Fortune 1000 companies.

At IMRI, we recognize the integral part our employees play in our ongoing success. To support this, we offer a comprehensive benefits package, tailored to meet the individual needs of our employees. We are committed to promoting their overall well-being and equipping them with the necessary tools to flourish in their careers. We welcome you to be a part of our ongoing mission as we continue to navigate the digital landscape, committed to empowering organizations with our innovative solutions.

Part-Time Sr.Penetration Tester

IMRI is seeking a part-time Senior Penetration Tester to support cybersecurity assessment and penetration testing activities focused on enterprise penetration testing. This role provides hands‑on technical testing expertise to identify exploitable weaknesses, validate attack paths, assess risk, use manual and automated penetration testing approaches, and deliver practical remediation guidance while maintaining compliance with approved rules of engagement.

Hybrid or onsite as required supporting Nassau County, NY. Majority of work will be performed during standard business hours Monday-Friday, 8:00 AM-5:00 PM EST, with occasional nights, weekends, or approved maintenance‑window support during OT/ICS discovery, rules‑of‑engagement coordination, testing execution, validation, reporting, and stakeholder briefings.

• Perform hands‑on internal and external penetration testing, web application security testing, wireless assessment, firewall review, vulnerability validation, segmentation analysis, and controlled exploit testing across approved enterprise, government, and operational environments.
• Support approximately 900 hours of annual senior penetration testing activities for County IT, District Attorney, Police Department, web application, wireless, firewall, infrastructure, and enterprise security validation activities.
• Coordinate closely with government client IT, legal or investigative stakeholders, authorized liaisons, system owners, and other stakeholders to minimize disruption and protect mission‑critical operations.
• Use automated penetration testing and attack‑path validation tools, including Horizon
  3.ai where applicable, in coordination with approved rules of engagement, testing windows, credential handling requirements, and safety constraints.
• Analyze findings using risk‑based methods aligned to NIST CSF, NIST SP 800‑53, NIST SP 800‑115, CIS Controls, CVE/CVSS, OWASP, PTES, and applicable CJIS considerations.
• Develop detailed technical findings, evidence, attack‑path narratives, operational impact analysis, prioritized remediation recommendations, and executive‑ready summaries.
• Participate in client briefings, remediation planning, retesting, lessons learned, and knowledge transfer activities to support long‑term operational resilience.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent professional experience.
• 5+…