Sr. Penetration Tester
Amyx, Inc.
Job Description
<h3>Overview</h3><p>Amyx is seeking a Sr. Penetration Tester for our DOD client to work remotely.</p><h3>Responsibilities</h3><ul>
<li>Independently performs penetration testing of applications, systems and enclaves Identifies security flaws in computing platforms and applications and devise strategies and techniques to mitigate identified cybersecurity risks. </li>
<li>Performs application and network penetration testing and wireless security assessments. </li>
<li>Applies offensive cybersecurity testing techniques, coordinate testing projects with internal and external system owners. </li>
<li>Reports the nature of identified cybersecurity risks and recommends risk mitigation measures to improve the cybersecurity posture of the enterprise.</li>
<li>Must have the ability to communicate accurate information</li>
</ul><h3>Qualifications</h3><h3>Minimum Requirements:</h3><ul>
<li>Six (6) years proven proficiency in performing extensive vulnerability assessment and penetration testing.</li>
<li>Three (3) years of experience with testing tools, including NESSUS, METASPLOIT, CANVAS, NMAP, Burp Suite, and Kismet</li>
<li>Three (3) years of experience with network vulnerability assessments and penetration testing methods</li>
<li>Three (3) years of experience with writing testing assessment reports</li>
<li>Two (2) ySears of experience with using, administering, and troubleshooting a WINDOWS Server, IIS</li>
<li>Knowledge of TCP/IP protocols and networking architectures</li>
<li>Two (2) years of experience with using, administering, and troubleshooting a major version of Linux.</li>
<li>Two (2) years of experience PCI DSS testing</li>
<li>Possess a certification in penetration testing, such as: <ul>
<li>Licensed Penetration Tester (LPT)</li>
<li>Certified Expert Penetration Tester (CEPT)</li>
<li>Certified Ethical Hacker (CEH)</li>
<li>Global Information Assurance Certification Penetration Tester (GPEN)</li>
</ul>
</li>
<li>Excellent written documentation and oral presentation skills</li>
<li>Knowledge of open security testing standards and projects, including OWASP</li>
<li>Knowledge of database, applications, and Web server design and implementation</li>
<li>Experience scripting in Perl, Python, Ruby, Bash, or Java</li>
<li>Experience with wireless LAN security testing</li>
<li>Possess oral and written communication skills.</li>
<li>Required to possess a DOD SECRET Clearance and be eligible for an IT-I Critical Sensitive security clearance or Tier 5 (T5) upon assignment.</li>
</ul><h3>Benefits include:</h3><ul>
<li>Medical, Dental, and Vision Plans (PPO & HSA options available)</li>
<li>Flexible Spending Accounts (Health Care & Dependent Care FSA)</li>
<li>Health Savings Account (HSA)</li>
<li>401(k) with matching contributions</li>
<li>Roth</li>
<li>Qualified Transportation Expense with matching contributions</li>
<li>Short Term Disability</li>
<li>Long Term Disability</li>
<li>Life and Accidental Death & Dismemberment</li>
<li>Basic &a