VAPT Specialist

Remote – Including client visits as needed
Location: US Based Candidates Only

Control Case is a global leader in certification, cybersecurity, and continuous compliance services. We are dedicated to helping organizations develop and implement streamlined, cost-effective, and comprehensive information security and compliance programs for both on-premise and cloud environments. Our services cater to industries needing compliance with standards such as PCI DSS, HITRUST, SOC 2 Type II, ISO 27001, PCI PIN, PCI P2PE, PCI TSP, PA DSS, CSA STAR, HIPAA, GDPR, SWIFT, CMMC, and FedRAMP.

Headquartered in Fairfax, Virginia, Control Case operates worldwide, with locations across North America, Europe, Latin America, Asia/Pacific, and the Middle East. We provide innovative Compliance as a Service (CaaS) solutions, enabling businesses to efficiently meet regulatory compliance requirements in a cost-effective manner.

As a Penetration Tester, you will conduct authorized penetration tests on computer systems to identify vulnerabilities that could be exploited. You may choose to specialize in areas such as:

• Networks and Infrastructure
• Operating Systems (Windows, Linux, and macOS)
• Web and Mobile Applications
• APIs and Web Services

The Penetration Tester role will be a blend of approximately 80% penetration testing and 20% project management. It will also involve understanding complex computer systems and technical cybersecurity terminology.

• Collaborate with clients to identify testing requirements, including the number and type of systems to be tested.
• Plan and develop penetration testing methodologies, scripts, and test procedures.
• Conduct remote tests on client networks or perform on-site infrastructure assessments to identify security weaknesses.
• Simulate security breaches to evaluate system vulnerabilities.
• Prepare detailed reports outlining identified security issues, associated risks, and recommendations.
• Provide actionable guidance on risk mitigation and security improvements.
• Present findings, risks, and recommendations to management and stakeholders.
• Assess business and user impact related to identified vulnerabilities.
• Analyze the potential consequences of unresolved security flaws on business operations.

• 4-5+ years of relevant penetration testing experience.
• US Citizenship or Green Card holder.
• Ability to travel to client locations as required.

Preferred

Certifications:

• OSCP – Offensive Security Certified Professional
• CPSA – CREST Practitioner Security Analyst
• CRT – CREST Registered Tester
• CRTO – Certified Red Team Operator
• CRTP – Certified Red Team Professional
• GIAC – Global Information Assurance Certification

At Control Case, we are committed to supporting our employees’ success and well-being. We offer a comprehensive benefits package designed to promote work-life balance, professional growth, and the opportunity to collaborate with an international team.

• Company-Provided Equipment: Essential tools, including a computer, to support your work.
• 401(k) Plan: Competitive retirement savings options.
• Health Insurance: Comprehensive medical coverage for employees and families.
• Dental & Vision Insurance: Access to dental and vision care benefits.
• 100% Company-Paid Life Insurance: Life insurance coverage at no cost to employees.
• Paid Time Off (PTO): Generous vacation time and official holidays.
• Mileage & Travel Reimbursement: Reimbursement for approved business travel expenses.
• Cell Phone & Internet Reimbursement: Monthly reimbursement for communication expenses.
• Employee Assistance Program (EAP): Confidential support services for mental health and personal well-being.
• Flexible Spending Account (FSA): Tax-advantaged healthcare and dependent care savings.
• Employee Discount Program: Access to discounts from participating vendors and partners.

This is a fully remote position, offering flexibility to work from home. You will be part of a dynamic international organization, collaborating with global teams through virtual meetings and communication platforms. The role requires strong self-management skills, the ability to meet deadlines, and a commitment to supporting Control Case’s global cybersecurity and compliance initiatives.