Job Description
Penetration Tester
Job Locations US-Nationwide | US-Remote
ID
2021-1760
# of Openings
1
Category
Security and Privacy Consulting
Overview
Focal Point Data Risk is a new type of risk management firm, one that delivers a unified approach to addressing data risk through a unique combination of service offerings. Focal Point has brought together industry-leading expertise in cyber security, identity governance and access management, data privacy and analytics, internal audit, and hands-on training services, giving companies everything, they need to plan and develop effective risk and security programs. By integrating these services, we provide our clients with the flexible support they need to protect and leverage data across any part of their organization. Simply put, Focal Point is the next generation of risk management. Agency solicitations will not be accepted.
The ideal candidate will possess a broad skill set and have the capacity for learning required to sustain our client engagements. The responsibilities that you will be given will make the most of your strengths and challenge you to develop even further in a supportive, team-focused atmosphere.
Responsibilities
What you will get to do:
Configure, run, and monitor automated security testing tools
• Perform manual validation of vulnerabilities
• Perform manual penetration testing of client systems, web sites, and networks to identify and exploit vulnerabilities
• Thoroughly document exploit chain/proof of concept scenarios for client consumption
• Work successfully from home office environment
• Perform overnight work as necessary (less than 10%)
• Work onsite and at client locations as necessary
Qualifications
Minimum Qualifications:
• 1+ years of experience with vulnerability assessment and penetration best practices
• 1+ years of experience with vulnerability and penetration testing techniques and tools
• 1+ years of experience with programming experience in Python, PHP, Perl, Ruby, .NET, or other interpreted or compiled languages
• Ability to travel up to 10%
• Ability to perform overnight work as necessary (less than 10%)
• 1+ years of experience and/or detailed knowledge of one or more of the following technologies: • Security testing tools including Metasploit, Nmap, Nessus, Burp Suite, or equivalents
• Linux operating systems
• Microsoft technologies
• Mobile application programming and/or security testing
• Wireless technologies
• Web application technologies
• Network implementation (operational and security)
• Telephony technologies (analog and IP)
• Social engineering
• Physical security
• Source code analysis software
• Intermediate to advanced Microsoft Office Suite (i.e., Word, Excel, PowerPoint)
Preferred Qualifications:
• 2+ years of hands-on penetration testing experience
• Currently has or desires to obtain one or more security-related certifications, including but not limited to: • Certified Information Systems Security Professional (CISSP)
• GIAC Penetration Tester (GPEN)
• GIAC Certified Incident Handler (GCEH)
• Offensive Security Certified Exert (OSCE)
• Offensive Security Certified Professional (OSCP)
Equal Opportunity
Please refer to the EEO is the Law Supplement Poster and the Pay Transparency Policy .
Focal Point participates in E-Verify. View the E-Verify and Right to Work posters
Focal Point is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. If you'd like to view a copy of the company's affirmative action plan or policy statement, please email hr@focal-point.com.
If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact Tracy MacMillan at 813-400-1142 or HR@focal-point.com. This telephone line and email address is reserved solely for job seekers with disabilities requesting accessibility assistance or an accommodation in the job application process. Please do not call about the status of your job application if you do not require accessibility assistance or an accommodation. Messages left for other purposes, such as following up on an application or non-disability related technical issues, will not receive a response.
For more information on applicable equal employment regulations, refer to the EEO is the Law poster.
Compensation and Hours
Salary Range: Not Available DOE (Depends on Experience) Not Available Other Benefits: Not Available Full or Part Time: Full Time (30 Hours or More) Job Duration: Over 150 Days Type of Job: Regular
Shift: Not Applicable
Hours per Week:
Hours Not Specified
View what local employers are paying Information Security Analysts