Cybersecurity Penetration Tester

About this Position

Job Title:

Cybersecurity Penetration Tester Requirements

• The selected consultant will perform an external penetration test on the staging Tax website to assess the extent of a compromise an attacker can achieve by identifying and exploiting any vulnerabilities.
• Penetration testing shall be completed no later than 10 business days after the start date agreed upon in the Scope of Work agreement resulting from this RFP.
• The consultant will produce an initial Vulnerability Assessment Report and a Corrective Action Report & Recommendations Report within 5 business days of the successful completion of the tax website and the Tax Staging environments.
• The reports will include all identified vulnerabilities and recommended corrective methods, along with recommended corrective actions.
• In order to simulate an external cyberattack, the State is requiring “Black Box” penetration testing be performed. This means the State will not provide the consultant with any information related to the systems being tested.
• The consultant is authorized to perform this test during the testing period between 8:00 am and 4:30 pm EST.
• Following the penetration test and remediation of any specific vulnerabilities identified, the State can request the consultant perform a one-time recheck of those vulnerabilities within the timeline allowed for in the Scope of Work agreement resulting from this RFP.
• Upon completion of this project the consultant will turn over or show proof of destruction, log files or other data captured as part of the test.