Vulnerability Assessment Analyst and Penetration Tester Camp Pendleton, CA

Vulnerability Assessment Analyst and Penetration Tester

Our client, a growing federal contractor, has multiple openings for Vulnerability Assessment Analysts and Penetration Testers with an active DoD Secret clearance for a newly awarded DoD program at Camp Pendleton, CA (San Diego area).

• Perform manual assessment of systems, services, and software; specializing in security issues beyond those identified by static analysis tools.
• Ensure services, applications, and websites are designed and implemented to the highest security standards.
• Conduct application and hardware penetration testing, automate repetitive tasks using various scripting languages, mentor, and lead other engineers to deliver complex penetration tests and vulnerability assessments.
• Drive automation, tooling, efficiency, and advance the team’s penetration testing capabilities.
• Create threat mitigation plans.

• Must be a US citizen due to government requirement.
• Must have an active DoD Secret clearance.
• Five years of hands‑on penetration testing experience with operating systems, web applications, and network infrastructure.
• Administrator‑level knowledge of Windows and Linux Server operating systems.
• Experience with operating system security.
• Competent with testing frameworks and tools, such as Burp Suite, Metasploit, Cobalt Strike, Kali Linux, Nessus, Power Shell Empire.
• Knowledge of computer network defense technologies, including router Access Control Lists (ACLs), firewalls, IDS/IPS, antivirus/EDR, and web content filtering.
• Strong written and verbal communication skills, including the ability to explain complex technical topics to non‑technical audiences.
• Ability to travel 10‑15% within the Continental United States and 5‑10% outside the Continental United States.
• Possess one of the following certifications upon onboarding:
  • Offensive Security Certified Professional (OSCP)
  • Offensive Security Web Assessor (OSWA)
  • GIAC Web Application Penetration Tester (GWAPT)
  • GIAC Penetration Tester (GPEN)
• Obtain one of the following certifications within 9 months of onboarding:
  • GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
  • Offsec Experienced Penetration Tester (OSEP)
  • Offsec Web Expert (OSWE)