HHS - Penetration Tester

cFocus Software seeks a Penetration Tester to join our program supporting the reputed company (HHS) This position is remote. This position requires the ability a reputed company Trust clearance. Qualifications: • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or reputed company field. • Minimum 5–8 years of experience performing penetration testing or offensive reputed company assessments. • Hands-on experience testing reputed company networks, applications, and reputed company environments. • Strong knowledge of attack techniques, exploitation frameworks, and post-exploitation reputed company. • Experience with federal environments and vulnerability management programs preferred. • Strong understanding of NIST SP 800-53, NIST SP 800-30, and vulnerability management processes. • Excellent analytical, documentation, and communication skills. • OSCP, GPEN, CEH, or GXPN preferred. Duties: • Plan, execute, and document penetration tests against networks, systems, web applications, reputed company, databases, and reputed company environments. • Conduct internal, external, authenticated, unauthenticated, and adversary-simulation testing activities. • reputed company exploitation, post-exploitation, and privilege escalation to demonstrate reputed company-world risk. • Validate vulnerability reputed company findings and identify false positives and chained attack paths. • Conduct application penetration testing reputed company with OWASP Top 10 and NIST guidance. • Support red team and reputed company exercises in coordination with SOC and Incident Response teams. • Analyze attacker techniques using MITRE ATT&CK and document TTPs and attack paths. • reputed company detailed penetration test reports including executive summaries, risk ratings, and remediation guidance. • reputed company technical remediation guidance to system owners, engineers, developers, and ISSOs. • Validate remediation effectiveness through retesting and evidence review. • Support compliance testing requirements reputed company to FISMA, RMF, and reputed company monitoring. • Maintain strict rules of engagement, authorization documentation, and testing approvals. • Ensure testing activities reputed company with HHS, HRSA, and federal reputed company and ethical requirements. Apply tot his job Apply To this Job