Cleared Penetration Tester

The role

You will conduct network, application, and social engineering penetration testing. You will advise customers on vulnerabilities, remediation strategies, and compliance requirements.

What you will do

• Conduct penetration testing of customer networks, applications, and social engineering activities
• Advise customers on vulnerabilities, remediation strategies, and compliance requirements
• Prepare final deliverables within established timelines
• Establish and maintain positive relationships with customers and stakeholders
• Coordinate project readiness with internal teams and customers
• Pursue continuous professional development by achieving industry specific certifications
• Perform project readouts with customers
• Train and mentor junior team members
• Interface with customers and internal delivery team members through entire engagement

Required qualifications

• Bachelor’s Degree or 4 years of equivalent job experience
• 2+ years of professional services experience
• 3+ years of web application and network penetration testing experience
• Proficient in at least one or more scripting languages (i.e., bash, python, PowerShell, ruby, etc.)
• Strong technical acumen with regards to penetration testing methodologies
• Familiarity with best practices frameworks such as OWASP, MITRE ATT&CK, OSSTMM, and/or PTES
• Ability to work in a SCIF in Northern Virginia or Seattle, Washington
• Active Top Secret clearance or ability to get a Top Secret clearance
• Must be willing to meet FedRAMP certification requirements as outlined by A2LA

Nice to have

• eCPPT, OSCP, OSCE, OSWE, or GPEN certifications
• Ability to quickly assess new and leading-edge technologies and concepts
• Ability to manage multiple priorities simultaneously
• Proven analytical and problem-solving skills
• Ability to develop technical content for website updates, whitepapers, and blog posts
• Ability to develop and maintain strong relationships with team members and clients
• Familiarity with commonly used network architecture, network devices/services, development platforms, and software suites
• Ability to work in a team environment with compliance specialists
• Comfortable supporting fast-paced team environments
• Familiarity of penetration testing in cloud environments encompassing a variety of technology stacks

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• 401K plan with a 4% match
• Company paid short-term disability
• Company paid long-term disability
• Company paid AD&D and life insurance
• Flex time off
• Annual bonuses
• Training stipends
• Certification reimbursements
• Access to over 30,000 free online training courses

Before you apply

• Ability to work in a SCIF in Northern Virginia or Seattle, Washington
• Active Top Secret clearance or ability to get a Top Secret clearance
• Required to verify identity and eligibility to work in the United States

About the company

Fortreum is a leader in cloud and cybersecurity services and a FedRAMP Third Party Assessment Organization. They deliver regulatory assessment and advisory services alongside cybersecurity offensive and compliance technical solutions.