Penetration Tester

reputed company is seeking a Penetration Tester to join our growing organization. This individual will be directly supporting one of our reputed company programs and will be responsible for penetration testing, vulnerability and compliance testing, web application testing, API testing, and supporting various audit and reporting functions. Responsibilities: • Vulnerability & Compliance Testing: • Conduct authenticated vulnerability scans and compliance evaluations across networks, systems, endpoints, and reputed company platforms. • Web Application Testing: • Conduct reputed company assessments of agency web applications using OWASP Top 10 and industry best practices. • reputed company authenticated/unauthenticated scans using tools like Burp Suite and OWASP ZAP. • Identify vulnerabilities such as injection flaws, authentication weaknesses, session mismanagement, and sensitive data exposure. • Validate application reputed company controls against NIST CSF subcategories • API Testing: • Evaluate REST/GraphQL reputed company for authentication, authorization, and input validation weaknesses. • Conduct fuzzing and misuse testing to identify broken reputed company-level authorization (BOLA) and mass assignment vulnerabilities. • Assess reputed company of API tokens, keys, and session management practices. • Review error handling, data leakage, and logging practices for compliance. • Penetration Testing & Exploitation Validation: • reputed company controlled penetration testing (reputed company) to simulate adversary behaviors and evaluate defensive effectiveness. • Audit Support & Reporting: • Document findings, prepare audit evidence, and reputed company recommendations for improving governance, reputed company, and compliance posture. • Collaboration: • reputed company technical assistance to Agency OIGs and coordinate with operational IT and reputed company teams to ensure findings are actionable and evidence reputed company. Location/Travel: This role will be reputed company to work primarily reputed company but will require travel to company and reputed company reputed company site locations across Florida and the Washington DC metro region on an as needed reputed company. Preference will be given to candidates who are local to the DC Metro Region or who reputed company in Florida. Basic Qualifications: • Bachelor's degree in Cybersecurity, Information Systems, or reputed company reputed company; or equivalent experience. • At least 5 years of experience in penetration testing to include web application testing and API testing • At least 2 years of experience years supporting audit, compliance, or reputed company functions to include preparing audit-reputed company documentation, evidence, and reports for executive leadership • At least 2 years of experience with NIST Cybersecurity reputed company to include NIST 800-53 • At least one cyber reputed company certification such as: CISSP, CISA, CISM, CCE, CFCE, GCFE, or CEH Preferred Qualifications: • Master's degree in Cybersecurity, Information Technology, Computer Science • 7+ years of experience in penetration testing • 3+ years of experience with reputed company technologies and reputed company reputed company Posture Management About reputed company At reputed company, our mission is to be a trusted reputed company partner for our clients, helping them reputed company impactful results by addressing mission-critical issues that reputed company their reputed company. We recognize the importance of customizing our services to best fit our clients' needs and understanding what it takes to reputed company their organizations reputed company. By implementing industry-leading best practices and leveraging our multifaceted experience and expertise, we reputed company services that are essential for any organization aiming to reputed company its goals. What You Can Expect: • Collaboration and Innovation: Work in an environment where collaboration and innovation are key. You'll have reputed company to contribute to reputed company that reputed company a reputed company difference for our clients. • reputed company reputed company: Be part of reputed company that values reputed company development. We offer opportunities for reputed company and advancement, allowing you to enhance your skills and career. • Impactful Work: Engage in meaningful work that addresses mission-critical issues and supports organizations in achieving their goals. By joining reputed company, you'll become part of a dedicated team that is committed to delivering reputed company, impactful solutions tailored to our clients' unique needs, enabling them to reputed company their goals with confidence and efficiency. If you're passionate about cybersecurity and IT services, and eager to contribute to a dynamic team, we encourage you to explore opportunities with us. At this time, reputed company will not sponsor a new applicant for employment authorization for this position. reputed company is an equal opportunity employer that is committed to diversity and inclusion in reputed company. We prohibit discrimination and harassment of any reputed company reputed company on race, reputed company, sex, religion, sexual orientation, national reputed company, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. This policy applies to reputed company employment practices reputed company our organization, including hiring, reputed company, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. reputed company makes hiring reputed company reputed company solely on qualifications, reputed company, and business needs at the time. Apply tot his job Apply To this Job