Penetration Tester Ll

Summary

Cyber74 is looking for a Penetration Tester to play a key role on our Offensive Security Team. This person will be helping deliver External and Internal Network Penetration Tests, Active Directory Security Assessments, Web Application Pen tests & Social Engineering Assessments. You may have the opportunity to work on adversary emulation exercises and red team engagements in the future. 

Primary Responsibilities

• Assist with assessment scoping and sales questions
• Work with team to develop and maintain assessment process documentation
• Design, deploy, and maintain offensive security infrastructure. 
• Create build documentation for offensive infrastructure systems. 
• Create custom tooling to automate process. 
• Create offensive security tooling to assist in testing client security controls. 
• Assist with assessment scoping and sales questions. 
• Perform various security assessments. 
• Contribute to internal knowledge base. 
• Stay up to date with current security issues and vulnerabilities. 
• Create mitigation recommendations and attack documentation for reports. 
• Produce actionable, threat-based, reports on security testing results and present to clients. 
• Participate in knowledge exchange with team
• Continue to expand knowledge and skillset

Skills & Experience

• Previous experience performing Offensive Security Testing for a consulting firm highly preferred
• 5 years in IT Field (or a Bachelor’s degree in computer science, Cyber Security or related subject)
• 3+ years of cyber security; Penetration testing
• Knowledge of Active Directory
• Strong written and verbal skills
• Solid understanding of Network Concepts & TCP/IP
• Extensive knowledge of cloud platforms like Microsoft’s Office 365/Azure or Amazon Web Services
• Experience with Scripting/Automation or modifying existing open source tools
• Experience with Web App Security
• Experience with Cobalt Strike, Mythic or tell us what C2 framework you are currently using effectively
• Must be able to influence without authority, innovate to tackle tough problems, and communicate clearly to all levels of the organization
• Ability to thrive in a supportive, result-oriented community and are committed to the relentless pursuit of continuous growth

Preferred Certifications (One or More certifications of the following)

• OSCP (Offensive Security Certified Professional)
• OSEP (Offensive Security Experienced Penetration Testers)
• CRTO (Certified Red Team Operator)
• GWAPT (SANS/ GIAC Web Application Penetration Tester)
• GPEN (SANS/ GIAC Certified Penetration Tester)
• CISSP
• Other Offensive Security Cert

Salary of $97k and up DOE

Our Team members enjoy

• A Fun, friendly culture
• The ability to work from home / work remotely for nearly all positions
• A collaborative environment where you can make an impact and help direct our future
• Family friendly, flexible schedules
• Growth opportunities
• A career path and roadmap that allows you to move up in the company and try new things
• We’re a mission focused cybersecurity company, we all love security (and might be a little paranoid about it), and we love protecting our clients
• Unlimited Responsible Time Off Policy
• 401k with immediate 5% match, Health/Dental/Vision Insurance, Paid Gym memberships, Etc. (the typical stuff)

Physical Requirements

Work is primarily knowledge-worker oriented using computer systems.  Occasional exertion and lifting of up to 20 pounds to move office or computer equipment.  Occasional crawling, kneeling, and squatting.  Constant use of computer (keyboard/mouse), and phone.  Visually inspects, prepares, and analyzes data & figures, views computer constantly.  Occasional travel (car/airplane).  Occasional exposure to outdoor environmental conditions as a result of travel.    

Cyber 74 is committed to equal opportunity regardless of race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity, or other characteristics protected by law. We value diversity and the existence of similarities and differences, both visible and not, found in our workforce, workplace and throughout the markets we serve. Our associates, customers and shareholders contribute unique and different perspectives as a result of these diverse attributes.