CCS Global Tech is a rapidly growing Information Technology company with a diverse portfolio of technology products and services and a large network of industry partnerships. With over 22 years of being a successful business with a global talent pool and presence, CCS is a certified Microsoft Gold Partner and specializes in delivering expert Microsoft based solutions for technical and business needs. We have been recognized by Inc. 500 Magazine as one of the fastest growing small companies in the Unites States.
we are a Tier 1 vendor for the City and County of San Francisco for Cloud Services, Staffing Services and Training Services. For this multi-year opportunity with a diverse set of needs to address, we are currently focusing on establishing partnerships with individuals as well as companies who can help us enhance our overall service portfolio, cut lead times, and ultimately help us deliver successfully. We currently hold sizable Government accounts in the San Francisco bay area including City and County of San Francisco, San Mateo County, and Santa Clara County.
We take great pride in our global reach and local influence. Your experience alongside our highly skilled and talented internal team who guide you along the way, offers key insights into what helps you stand out in a competitive job market.
If you are a partner company, please submit resumes with contact information of your own W2 Consultants only. Submitted consultants are expected to have excellent communication skills.
Penetration Tester
Public trust
Washington DC
Penetration Tester Junior | 3+ years
Job Description -
The Contractor shall provide Penetration Testing Support to CBP information systems, including but not limited to:
Provide or assist with penetration testing as requested by Components or System Owners / ISSM / ISSO in support of Security Controls Assessment, Accreditation activities, continuous monitoring, and FISMA requirements.
Provide penetration testing summary reports to the appropriate System Owner / ISSM / ISSO, Government lead, CBP SOC Manager and document the findings.
Conduct penetration testing only under very well-defined written conditions, agreed to in advance by the CBP VAT Government Leads, CBP VAT Manager, and appropriate System Owner / ISSM / ISSO.
Prepare and submit security testing Rules of Engagement (ROE) for Government managerial approval prior to conducting penetration testing.
Ensure the ROE provides operational security controls to protect both the system and network.
Provide a detailed report of the findings and recommendations to the System Owner / ISSM / ISSO, Government lead, CBP VAT Manager and archive the data to support remediation activities, retest, and comparative analysis.
Propose solutions, methodologies, or alternative practices to improve CBP penetration testing capabilities.
When requested, provide assessments and solutions to vulnerabilities discovered / disclosed by third parties.
Conduct assessments in conjunction with SOC / CTI / CDF to discover or emulate IOCs, TTPs and Common Weakness Enumerations (CWEs) to further protect systems and networks.
Be flexible to support penetration testing and / or validation on Information Systems that require testing during non-core hours. This does not provide a requirement to test outside of standard business hours.
The Penetration Test Team will travel within the Continental United States (CONUS) and Outside the Continental United States (OCONUS) as needed with the costs not to exceed the funding travel line item.
Travel to be physically on location to perform onsite security assessments of CBP facilities, systems, and applications as requested.
Maintain a repository of past penetration tests and details of vulnerability findings and remediation.
Track and maintain records of completed penetration tests for metrics gathering and reporting.
Conduct wireless access point testing as required on various customer sites located throughout the United States, Puerto Rico, and Guam.
Conduct RF testing as required on various customer sites located throughout the United States, Puerto Rico, and Guam.
Assist the Government in performing Mobile Application assessments as requested by Components or System Owners / ISSM / ISSO in support of Security Controls Assessment, Accreditation activities, continuous monitoring, and FISMA requirements.
Assist the Government in performing Non-Tier 1 HVA assessments as requested.
Assist the Government in performing Adversarial Assessments (AA) as requested.
Assist the Government in providing after action / findings reports to the CBP VAT Government Leads, CBP VAT Manager and appropriate System Owner / ISSM / ISSO applicable staff for remediation.
