Penetration Tester

Taylor Corporation is a dynamic, diversified company with big plans for the future ― and your career. We power our employees’ potential and strive to create opportunity and security for every member of the team. If you’re ready for something bigger ― more challenge, more variety, more pathways for professional growth ― we should talk. We’re passionate about our work, we believe there is always a better way, and we’re looking for people like you.
Ready to reach your potential? It’s time to look at Taylor.

** Your Opportunity:
** Taylor Corporation is seeking a Penetration Tester to perform penetration tests and vulnerability assessments across network, application, cloud, and wireless environments, including segmentation testing, in accordance with industry standards and regulatory requirements. The Penetration Tester will design and perform penetration tests, analyze findings, report results, and consult on remediation options. This mid-level position requires demonstrated hands-on experience with Windows and Linux operating systems, networking, cloud environments, risk management, and secure application development practices, along with the ability to communicate security risk and recommend practical remediation approaches.

** Citizenship and Security Clearance:
** This position must be performed within the United States. Candidates must be U.S. citizens and able to satisfy applicable customer access, background-screening, and security clearance requirements.  
** Your Responsibilities:
** The Penetration Tester will work as part of a team and may be responsible for:
* Work with business and technical stakeholders to determine test objectives, scope, and rules of engagement.
* Design and perform internal and external network, web application, API, cloud, wireless, and segmentation penetration tests and vulnerability assessments against applicable industry standards, regulatory requirements, and contractual obligations.
* Perform manual validation and controlled exploitation to confirm vulnerabilities, identify attack paths, and distinguish penetration testing from automated vulnerability scanning.
* Develop test plans; conduct reconnaissance, manual testing, and safe exploit validation; protect test data; remove testing artifacts; communicate results; and perform remediation validation and retesting.
* Conduct testing using recognized methodologies and requirements, including the OWASP Web Security Testing Guide, OWASP ASVS when applicable, NIST SP 800-115, PTES or a comparable methodology, PCI DSS, and applicable customer or contractual requirements.
* Follow approved rules of engagement, test windows, escalation procedures, data-handling requirements, and stop-testing conditions. Coordinate potentially disruptive activity with system owners and immediately report unintended impacts or exposure of sensitive information.
* Provide remediation consultation for penetration test findings.
* Perform risk assessments of networks and applications, wireless technologies, and other technical environments.
* Document results and recommendations using company-standard templates and prepare both detailed technical reports and concise executive summaries.
* Develop, document, and maintain penetration test procedures, finding templates, and other documentation.
* Review and provide input on penetration test reports prepared by other penetration testers.
* Report to management concerning residual risk, vulnerabilities, and other security exposures, including misuse of information assets and noncompliance.
* Safeguard credentials, test data, customer information, and exploit evidence; follow responsible disclosure and company ethics requirements; and use testing techniques only within expressly authorized scope.
*…