Penetration Tester

Convergence Networks is Portland’s leading Managed Services Firm. Our philosophy is to foster strong relationships with fellow teammates and clients, create an unrivaled work environment, and provide an outstanding customer experience. We are looking to expand our team with the addition of a Penetration Tester (SE), but before we get into what the job is, let’s start with why you would want to work with us!

First and foremost, our culture:
We have worked very hard to create a culture of unity, transparency, and trust. Our leadership team wants you to be successful at Convergence, and we will do anything we can to support your personal and professional growth.

We encourage a culture of diversity, and welcome people of all different backgrounds and walks of life to join our team. We have found that having people with a variety of experiences helps add to our success.

We offer a competitive salary with profit sharing bonuses, and a great PTO plan with 8 additional paid holidays each year.

An education and certification reimbursement program is also available so we can help you move up the ranks.

A company-matched 401k plan that is designed to help you meet your retirement goals.

Some of the absolute best health insurance plans available for you and your family (including free healthcare plans!).Outstanding teammates; we’re very selective to make sure we have the best staff available for you to work alongside!

Many teambuilding and company events throughout the year so you can get to know your teammates on a more personal level, as well as kick back and have some fun (families are oftentimes included as well).Relaxed work environment; we know you’ll be in the office a fair amount of time, and we want you to enjoy yourself and experience what it’s like to be a part of the Convergence family.

As for the position, our SE serves as an integral part of our technical services team. In this role you will perform intermediate and advanced offensive security tasks that support the delivery of client security services, including vulnerability assessments, penetration testing, and social engineering engagements. This is a client-facing role that requires the ability to independently deliver standard penetration testing engagements while collaborating with fellow Security Engineers and Analysts and providing technical assistance and direction to Security Analysts.

This is an intermediate position that requires strong knowledge of networking, operating systems, identity services, common enterprise technologies, and offensive security concepts such as vulnerabilities, exploitation, post-exploitation, and social engineering. Qualified SEs are expected to plan, execute, document, and communicate penetration testing work professionally across a range of Convergence services.

Summary and Responsibilities:

The primary responsibilities of the SE are to plan and execute technical security tasks that serve as critical elements of the security services we deliver to our clients.

Penetration Testing & Security Assessments Conduct Open-Source Intelligence (OSINT) gathering and reconnaissance activities against target organizations.

Independently perform standard external and internal network penetration testing engagements.

Assess Microsoft Active Directory environments, including enumeration, privilege escalation, credential abuse, lateral movement, and common attack paths.

Conduct authenticated and unauthenticated vulnerability assessments against client environments.

Validate vulnerabilities through manual testing and, when authorized, controlled exploitation and post-exploitation techniques on Windows and Linux systems.

Conduct standard web application penetration testing and support advanced application testing based on experience and engagement requirements.

Specialized Security Assessments Depending on experience and specialization, perform wireless security assessments against corporate wireless infrastructure.

Depending on experience and specialization, execute physical penetration testing engagements to evaluate physical security controls.

Depending on experience and specialization, conduct cloud penetration testing and…