Job Title: Penetration Tester
Location: Work will be remote (Morrisville, NC; Falls Church, VA; or Eagan, MN given preference)
Duration: 12 Months
Task description and/or any specific requirements:
Highly skilled in web application testing, API testing, and network testing
Prior experience with Burp Suite Professional, or other similar DAST tools
Experience with AI and penetration testing AI
Experience with Kali Linux and most of the tools available in the distro for penetration testing
Experience with tools such as Metasploit Pro and Cobalt Strike for red team operations
Experience with Red Team engagements from planning to execution
Experience with phishing network users to gain access for lateral movement on the network
Experience with Purple Team engagements to test monitoring controls in coordination with engineering teams and CSOC teams.
Proficiency in scripting, such as Python and/or PowerShell
Experience with penetration testing supporting PCI-DSS
Technical writing skills, along with ease in communicating concepts related to security vulnerabilities and attack path scenarios.
Familiar with OWASP Application Security Verification Standard (ASVS) and MITRE ATT&CK framework
Penetration testing certification recommended.
Acceptable certifications: Offensive Security Certified Professional (OCSP), Global Information Assurance Certification (GIAC) Certifications (e.g., GIAC Certified Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), or GIAC Exploit Researcher and Advanced Penetration Tester (GXPN))
Experience:
A minimum of eight (8) years relevant experience.
A degree from an accredited College/University in the applicable field of services is required. If the individual's degree is not in the applicable field then four additional years of related experience is required.
Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)
Must be eligible for Security Clearance
About IDEXCEL, INC
Idexcel is an IT services organization, with a mission to bring great people and great organizations together. Our diverse client base represents a wide range of industries, including technology, telecom, insurance, healthcare, manufacturing, banking & financial services, food & commodities trading and federal organizations. Our teams of experienced recruiters directly work with client companies seeking exceptional people to help with their business initiatives. Idexcel, Inc. is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, disability, military status, national origin or any other characteristic protected under federal, state, or applicable local law.