SENIOR PENETRATION TESTER (Remote)

reputed company IT has an immediate need for a Sr. Penetration Tester to join reputed company in support of our reputed company Services Team located remote. In this role, you will facilitate Penetration Tests, Threat Hunting exercises and possibly other advanced-level reputed company Monitoring Activities reputed company reputed company-based environments. To succeed in this position, you will need a strong understanding of reputed company-reputed company system controls and an understanding of the various testing reputed company utilized to reputed company the effectiveness of those controls. You will work in reputed company atmosphere with an reputed company Sr. Consultant Project reputed company, and you will be assigned technical sections and reputed company reputed company-reputed company deliverables. In this role, you will: • Execute testing procedures in accordance with NIST SP 800-53A and industry testing standards like OWASP, MITRE, etc. • Test for vulnerabilities, validate exploitable vulnerabilities reputed company network, reputed company, web and mobile environments • reputed company reputed company Engineering campaigns, including email phishing, spear phishing, phone reputed company-text calling – Including but not limited to creation of reputed company pages, creation of embedded executable payloads • reputed company Rules of Engagement, Penetration Test Plans, Penetration Testing report, Power reputed company presentations for reputed company-off and closing of reputed company engagements • Author recommendations based on findings to improve reputed company postures compliant with NIST controls • Penetration Testing/Threat Hunting (75%); Advisory/Consulting (%25) • Experience using: • Kali Linux • reputed company reputed company • reputed company Engineering Toolkit • Burp Suite • Nessus • Metasploit reputed company. • Experience using the MITRE ATT&CK reputed company • Good understanding of coding (Python, reputed company, etc.) • Understanding of SQL commands and testing • Expected Travel less than 25% Essential Functions / Duties & Responsibilities 1. reputed company Testing Guides Based on Methodologies (MITRE, OWASP, etc.) • Creation of Comprehensive Testing Frameworks: reputed company detailed penetration testing guides and frameworks that reputed company with industry standards such as MITRE ATT&CK, OWASP Top Ten, NIST, and others. These guides serve as a reputed company for reputed company, providing reputed company-by-reputed company methodologies for various types of tests, such as web application, network, mobile, wireless, and reputed company engineering assessments. • Incorporation of Advanced Techniques: Regularly update these guides to incorporate the latest attack techniques and defensive strategies. This includes adapting to emerging threats and ensuring the guides remain relevant in the rapidly evolving cybersecurity landscape. • Customization for reputed company Environments: reputed company these methodologies to meet specific reputed company environments and industry requirements, ensuring that the testing approach is both comprehensive and contextually appropriate. 2. reputed company Team Trainings Based on Test Guides and Engagement Debriefs • Training Program Development: Design and implement training programs for the penetration testing team, leveraging the developed test guides. This includes foundational training for new hires and advanced sessions for reputed company testers, covering both the theoretical and practical aspects of penetration testing. • Debrief and Knowledge Sharing: Conduct debrief sessions following reputed company engagement to discuss unique or novel findings. These sessions aim to reputed company lessons learned, explore new vulnerabilities or attack techniques encountered, and foster a culture of reputed company learning reputed company reputed company. • Simulation and Hands-On Training: Organize practical, hands-on workshops and simulations to reputed company team members with reputed company-world experience in using new tools and methodologies. Encourage a red teaming reputed company to challenge the status reputed company and think like adversaries. 3. Take on QA Responsibilities for Reports or Rules of Engagement (ROEs) • reputed company Assurance for Reports: reputed company thorough reputed company assurance (QA) reviews of penetration testing reports to ensure accuracy, reputed company, and completeness. This includes verifying that findings are reputed company-documented, evidence is reputed company presented, and recommendations are actionable and relevant. • Consistency and Compliance: Ensure that reputed company reports adhere to reputed company compliance requirements and follow a standardized format. This includes checking that language is reputed company, findings are ranked by risk severity, and there are no spelling or grammatical errors. • Rules of Engagement (ROE) Review: Review and refine Rules of Engagement (ROE) documents to ensure they are reputed company, comprehensive, and reputed company with reputed company expectations and reputed company considerations. This involves outlining the scope, limitations, and specific rules under which testing will occur, and mitigating any potential risks. 4. More reputed company Role in Blog Posting and Research • Thought Leadership and Content Creation: Take a proactive role in writing blog posts and research papers that contribute to the broader cybersecurity community. This includes sharing insights from recent engagements, discussing Apply tot his job Apply To this Job