Overview
Join to apply for the Penetration Tester role at
We are seeking a Penetration Tester - Senior to join our Defense Logistics Agency (DLA) team.
Responsibilities
• Independently perform penetration testing of applications, systems, and enclaves managed by the Defense Logistics Agency (DLA).
• Conduct application and network penetration testing, wireless security assessments, and vulnerability identification.
• Apply offensive cybersecurity testing techniques using industry-standard tools and methodologies.
• Coordinate penetration testing projects with internal stakeholders and external system owners.
• Identify, document, and report security flaws in computing platforms, applications, and enterprise networks.
• Develop and recommend mitigation strategies to address identified cybersecurity risks and strengthen enterprise security posture.
• Prepare comprehensive assessment reports that detail findings, risk severity, and recommended remediation.
• Support continuous improvement of testing processes and contribute to the adoption of open security testing standards (e.g., OWASP).
• Provide technical expertise to management and customers through oral presentations, briefings, and written deliverables.
Qualifications
• Minimum six (6) years of experience performing vulnerability assessments and penetration testing.
• Minimum three (3) years of experience with testing tools such as Nessus, Metasploit, CANVAS, Nmap, Burp Suite, and Kismet.
• Minimum three (3) years of experience conducting network vulnerability assessments and penetration testing methodologies.
• Minimum three (3) years of experience developing detailed assessment and testing reports.
• Minimum two (2) years of experience administering and troubleshooting Windows Server and IIS environments.
• Minimum two (2) years of experience administering and troubleshooting major Linux distributions.
• Minimum two (2) years of PCI DSS testing experience.
• Familiarity with TCP/IP protocols, networking architectures, database, applications, and web server design.
• Experience scripting in at least one language (Perl, Python, Ruby, Bash, or Java).
• Experience performing wireless LAN security testing.
Certifications
• DoD 8570 IAM Level III Baseline Certification
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)
• GIAC Security Leadership Certification (GSLC)
• Certified Chief Information Security Officer (CCISO)
• Penetration testing certification such as Licensed Penetration Tester (LPT) or Certified Expert Penetration Tester (CEPT) or Certified Ethical Hacker (CEH) or GIAC Penetration Tester (GPEN) or equivalent
• Or have a minimum of eight (8) years of penetration testing experience.
Clearance
• Secret - IT-II (Tier 3) Non-Critical Sensitive Clearance with a favorable NACLC.
Seniority level
• Mid-Senior level
Employment type
• Full-time
Job function
• Information Technology
Industries
• IT Services and IT Consulting
We are committed to equal employment opportunity. TekSynap does not discriminate against any person because of race, color, creed, religion, sex, sexual orientation, gender identity, protected veteran status, national origin, disability, age, genetic information or any other characteristic protected by law.
If you believe you need a reasonable accommodation to search for a job opening or to submit an application, please contact for assistance.
Work environment and physical demands
Locations: Remote
• Type of environment: Remote
• Noise level: Medium
• Work schedule: Day shift Monday - Friday; may be required to work evenings and weekends to meet program and contract needs.
• Amount of Travel: Less than 10%
Physical demands
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
U.S. Citizen required. Secret clearance required.
Reasonable accommodation and vaccination requirements may apply as per contract or law.
By applying to a role at TekSynap you are providing consent to receive text messages regarding your interview and employment status. If at any time you would like to opt out of text messaging, respond "STOP".
Note
This description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities required for the job. Duties may change at any time with or without notice.
#J-18808-Ljbffr