SENIOR Penetration TESTER; Remote

Overview

Sr. Penetration Tester position with Emagine IT to join our Commercial Services Team located remote.

In this role, you will facilitate Penetration Tests, Threat Hunting exercises and possibly other advanced-level Continuous Monitoring Activities within cloud-based environments. To succeed in this position, you will need a strong understanding of security-related system controls and an understanding of the various testing methods utilized to ascertain the effectiveness of those controls. You will work in a team atmosphere with an experienced Sr.

Consultant Project Lead, and you will be assigned technical sections and provide client-ready deliverables.

• Execute testing procedures in accordance with NIST SP 800-53A and industry testing standards like OWASP, MITRE, etc.
• Test for vulnerabilities, validate exploitable vulnerabilities within network, cloud, web and mobile environments
• Perform Social Engineering campaigns, including email phishing, spear phishing, phone pre-text calling - Including but not limited to creation of landing pages, creation of embedded executable payloads
• Develop Rules of Engagement, Penetration Test Plans, Penetration Testing report, Power Point presentations for kick-off and closing of client engagements
• Author recommendations based on findings to improve security postures compliant with NIST controls
• Penetration Testing/Threat Hunting (75%);
  Advisory/Consulting (25%)
• Experience using:
  • Kali Linux
  • Cobalt Strike
  • Social Engineering Toolkit
  • Burp Suite
  • Nessus
  • Metasploit Framework
  • Experience using the MITRE ATT&CK Framework
  • Good understanding of coding (Python, Ruby, etc.)
  • Understanding of SQL commands and testing
  • Expected Travel less than 25%