Penetration Tester - Cyber Defense Technologies - Chantilly, VA
Cyber Defense Technologies
Overview: CDT is looking for a Penetration Tester to This will be supporting a government customer onsite in Chantilly, VA. Candidates with OSCP certification are highly recommended to apply.
Clearance: An active Top Secret/SCI with CI poly is required. Candidates who do not meet these requirements will not be considered.
Responsibilities:
• Conduct penetration testing that uses both active and passive capabilities to expose and exploit IA vulnerabilities.
• Review and evaluate information systems and recommend changes to the Government that can improve information confidentiality, integrity and availability.
• Responsible for performing security focused services to improve security posture.
• Conduct test and evaluations of software, hardware, networks and applications.
• Reviews of the documents to ensure completeness and compliance with the RMF process, ICD 503 requirements, and/or other applicable regulations.
Qualifications:
• High School Diploma/GED, Associates Degree and 5 years of relevant work experience.
• Bachelor's Degree and 3 years of relevant work experience.
• Experience in cyber security with a focus on red teaming, penetration testing, or threat hunting.
Desired Qualifications:
• Strong understanding of network protocols and troubleshooting, server and workstation operating systems, exploits and vulnerabilities.
• Strong working knowledge of common penetration tools, tactics, techniques, and procedures.
• Experience with cloud environments.
• Strong understanding of penetration testing methodologies (MITRE ATT&CK, OWASP).
• Ability to incorporate threat intelligence data into attached or penetration testing scenarios.
• Excellent problem solving and troubleshooting skills with a strong attention to detail.
• Ability to read/write code using interpreted languages (Python, PHP, Ruby, etc.).
• Experience with simulated/emulated environments and/or virtualization technologies.
• Experience with orchestration tools and virtualization environments (D