The primary role of this Penetration Tester is to perform multidisciplinary assessment services as needed. Examples include Application Security Assessments against web apps, mobile apps, web services, and fat-client applications. Proficiency in delivering Network Vulnerability and Penetration Assessments both externally and internally against wired and wireless targets is also required. Penetration Testers can assess external, internal, wired, and wireless networks. Must demonstrate the highest skill levels and help set acceptable assessment standards for the Company.

Duties and Responsibilities

• Deliver Application Security Assessments against web apps, mobile apps, web services, and fat-clients

• Deliver External, Internal, and Wireless Vulnerability and Penetration Assessments

• Deliver highly targeted and specialized Red Team engagements

• Deliver phishing-based Social Engineering Assessments

• Communicate with customers in a friendly manner, quickly and clearly, and with great accuracy during:Kickoff and scoping calls

• Assessment status updates and ongoing project communication

• Report delivery

• Assist in enhancing various company methodologies

• Mentor Security Consultants and assist in their efforts to develop areas of expertise

• Demonstrate the highest level of offensive skills, pre and post-exploitation

• Demonstrate excellent writing skills both during email correspondence and report creation

• Prioritize findings based on perceived risk, using existing knowledge of clients’ business to ascertain finding severity

• Lead by example in behavior, work ethic, and punctuality

Job Requirements

Experience Requirements

• Minimum of 5 years of experience in penetration testing 

• Desired certifications – Security+, CEH, GPEN, OSCP, AWS, or equivalent 

• Understanding of OWASP Top 10 and “industry best practices” for penetration testing 

• Understanding of all aspects of Penetration Testing with an emphasis on white box testing, black box testing, internal networks, external networks, web applications, and application/code review 

• Understanding of Pen Test methods such as Open-Source Security Testing Methodology Manual (OSSTMM), Open Web Application Security Project (OWASP), Penetration Testing Execution Standard (PTES), NIST, etc. 

• Proficient with the command line interface of multiple operating systems – Windows, macOS, Linux, etc. 

• Solid understanding of manual scripting and scripting languages- ex. Python, Bash, PowerShell, C/C++, etc. 

• Proficient with using commercial and open-source penetration testing tools – ex. Metasploit, Nikto, SQLMAP, Responder, Nessus, Netcat, Burp Suite, etc. 

• Conduct and document vulnerability scans and penetration testing on web-based applications and their underlying hosts 

• Proven ability to perform computer network vulnerability assessment and penetration testing 

• Understanding of risk planning and mitigation strategies 

• Ability to prepare and present documents and briefing materials 

• Advise on new threats to the technologies and environment and provide mitigation steps when applicable 

• Provide security guidance on design, deployment, and architecture of web-based and cloud hosted applications. 

• Strong organizational and time-management skills with the ability to handle multiple tasks at once, while still paying attention to detail 

• A strong work ethic and self-starter attitude, with the ability to thrive in a fast-paced environment 

How To Apply

Interested? Send your application to contact@eaglelionsystems.com

Email Subject line “Senior Penetration Tester”