Vulnerability Assessment Analyst and Penetration Tester

Vulnerability Assessment Analyst and Penetration Tester

Location: Remote

Need Active Security Clearance

Minimum Years of Experience- 3 Years

Education:  Associates Degree

Role Description:

May support in part in in whole technical vulnerability assessments of applications and infrastructure, vulnerability research, and generation of assessment reports. Execute network/app/cloud pen tests under agreed ROE; supplement manual testing with AIbased tooling; produce evidence/reports for remediation.

Duties may include:

• Contributes to the selection of appropriate technical tests, network or vulnerability scan tools, and/or pen testing tools based on review of requirements and purpose; lists all steps involved for executing selected test(s) and coaches’ others in the use of advanced research, development, or scan tools and the analysis of comparative findings between proposed and current technologies
• Coordinates or leads teams to conducts ethical tests, network scans, and/or vulnerability scans that support the evaluation of information safeguard effectiveness
• Supports development of and follows general test and evaluation plans to compare current and proposed technologies; assesses test results to determine whether they match requirements specification
• Assists in the coordination of technical tests, network scans, and/or vulnerability scans that support the evaluation of information safeguard effectiveness
• Conduct reconnaissance, target assessment, data gathering and vulnerability research
• Leverages COTS tools to conduct vulnerability assessments, analyzes results, identifies exploitable vulnerabilities, and verifies vulnerabilities
• Prepares report documents by tailoring technical information and creates benchmark or security authorization reports; outlines key findings related to speed, risks, results and reliability, and recommends acceptance or rejection of technology for applied use.
• Prepares and reviews assessment documents, validates and communicates key findings to stakeholders