Penetration Tester Job at Core BTS, Hatfield, PA

a2RmVVdNNjlDNThKdGVHTEhPTnhnR2dLTVE9PQ==
  • Core BTS
  • Hatfield, PA

Job Description

Job Description

Job Description

Penetration Tester

Core BTS, Inc. Remote Contract to Hire

Through Core BTS Resource Management Services (RMS), we offer custom talent solutions to help our clients meet their evolving technology and business needs. We help effectively match the right technology professional to their organization, recruiting for contract, contract-to-hire, and direct roles. Our client in (area/region) has an immediate need for a (job title).Please note that this is a (contract/contract to hire/direct hire) opportunity with our client and NOT with Core BTS.

Location: Remote Full Time

Summary

Core BTS is looking for a Penetration Tester to join our growing and dynamic Red Team within our security practice. As a member of the security services consulting team, focused on Red Teaming, Penetration Testing, Vulnerability Assessments and Management, you will work in a collaborative environment to assist clients in the evaluation and remediation of security risks.

Essential Duties

Perform Red Team, Penetration Testing, and Social Engineering activities within Offensive Security Assessment projects.

Draft detailed vulnerability and risk remediation recommendations, reports, and plans for clients and the security findings of their vulnerability management processes.

Provide both technical-level and business-level reports, including presentations to articulate cybersecurity risks and recommendations.

Perform advanced technical cyber security assessments, including Penetration Testing and Red Team engagements, as required.

Monitor trending security vulnerabilities and risks within the industry, including weaponization of vulnerabilities and zero-day vulnerabilities.

Track high-severity vendor security updates and patches.

Technical Skills

Required

Penetration Testing Tools (such as, Metasploit, Cobalt Strike, etc.)

Tenable Vulnerability Product Suite (including, Tenable.sc,

Nessus Manager, and/or Nessus Professional)

Network Scanning Tools (including, NMAP and/or equivalent port/protocol scanning tools)

Microsoft Azure and/or Windows Security Policy Administration

Microsoft Active Directory Attacking Experience

Microsoft Windows and GNU/Linux Proficiencies (including, Command Line Interface access)

Application Vulnerability Scanning (such as, VeraCode, Snyk, SonarQube BurpSuite Professional, and/or equivalent web development security tools)

Web Application Security Testing (such as, BurpSuite, OWASP ZAP, Nikto, and/or equivalent web application testing tools)

Knowledge of the MITRE ATT&CK Framework

Preferred

Additional Vulnerability Scanning and Analysis Platforms (such as, Qualys, Nexpose, OpenVAS, etc.)

Scripting and/or Coding (such as, Perl, Python, Ruby, C/C++, Go, etc.)

Microsoft Windows System Administration

GNU/Linux System Administration (including, Debian and Red Hat derivative distributions)

Professional Experience

Required

Penetration Testing and/or Red Teaming

Vulnerability Assessments and/or Vulnerability Management

Technical and/or Offensive Security Assessment Report drafting and delivery

Technical Vulnerability Risking, Ranking, and Prioritization

Three or more (3+) years of experience in Cybersecurity (Vulnerability Management, Penetration Testing, Red Teaming, etc.)

Preferred

Vulnerability Research and/or Exploit Development

Cybersecurity Risk Management Lifecycle

Security Guidance and Consulting

Five or more (5+) years of experience in Cybersecurity (Vulnerability Management, Penetration Testing, Red Teaming etc.)

Education and Certifications

Required

Degree or equivalent professional experience in Cybersecurity or Information Technology

CompTIA Security+, or other entry-level cybersecurity knowledge certification

Practical Network Penetration Tester (PNPT)

OR Offensive Security Certified Professional (OSCP) and Offensive Security Wireless Professional (OSWP)

Preferred

Bachelors Degree in Cybersecurity, Information Technology, or Network Technology, or another related technical field.

One of the Following:

GIAC Certified Penetration Tester (GPEN, GXPN)

Certified Red Team Operator (CRTO)

Certified Red Team Professional (CRTP)

Job Tags

Full time, Contract work, Immediate start, Remote job,

Similar Jobs

EPAM Systems, Inc.

Senior React.js Developer Job at EPAM Systems, Inc.

Senior React.js Developer DescriptionWe seek a talented Software Engineer with React.JS and Node.JS experience to work as part of the micro-frontend delivery Scrum team on a challenging project for a famous luxury brand. We build in modern technologies React, NextJS... 

Vanda Pharmaceuticals Inc.

Associate Pharmaceutical Sales Representative Job at Vanda Pharmaceuticals Inc.

** Associate Pharmaceutical Sales Representative****Job Category****:** General **Requisition Number****:** ASSOC001362 Showing 1 location **Job Details****Description** As an Associate Neuroscience Specialty Representative, you will be responsible for: * Becoming... 

Hubler Honda

Sales Consultant Job at Hubler Honda

 ...Automotive Group is looking for our next Automotive Sales Consultant This is an exciting opportunity in a growing, fast-paced industry...  ...Certification: ~ Driver's License (Required) Ability to Relocate: ~ Indianapolis, IN/47280: Relocate before starting work (... 

Celanese

Textile Process Specialist Job at Celanese

 ...value chainwith spinning partners, knitting mills and garment designers Providetechnical supportthroughout the qualification Oversee...  ...to the team: ~10+ years oftechnical hands-onexperience intextileindustry, especially withmeltfiber and/orelastic fiber... 

Wave Resort

Marketing Manager, Hotel DUPONT Job at Wave Resort

** Marketing Manager, Hotel DUPONT****Job Category****:** Sales & Marketing **Requisition Number****:** MARKE08004 Showing 1 location **Job Details****Description****JOB SUMMARY:****RESPONSIBILITIES + AUTHORITIES:*** Always treats guests, teammates and partners...