OverviewAcuity is growing and looking to hire a Penetration Tester.
In return, Acuity Inc offers a great company culture with wonderful work/life balance and a robust compensation package which includes Health/Dental/Vision, up to $6K training & professional development benefit annually, 401K matching, corporate events/team-building and more!
Responsibilities
What you 'll be doing:
- Conduct internal penetration testing and vulnerability assessment of servers, web applications, web services, and databases
- Conduct security reviews, technical research, and provided reporting to increase security defense mechanisms
- Manually exploit and compromise operating systems, web applications, and databases
- Examine results of web/OS scanners, scans and static source code analysis
- Identify vulnerabilities, misconfigurations, and compliance issues
- Write final reports, defend all findings to include the risk or vulnerability, mitigation strategies, and references
- Provide security recommendations for developers, system administrators, project managers, and senior government stakeholders
- Report vulnerabilities identified during security assessments
- Write penetration testing Rules of Engagements (RoE), Test Plans, and Standard Operating Procedures (SOP)
Qualifications
Required Skills:
- Experience with NIST 800-53 and Risk Management Framework
- Ability to meet and coordinate with various audiences to include developers, system administrators, project managers, and senior government stakeholders
Desired Skills:
- Experience with AWS Cloud Security
- Strong writing skills
- Certifications: CEH 6 Certified Ethical Hacker Certification, CPT 6 Certified Penetration Tester
Clearance Requirements:
MinUSD $175,000.00/Yr.
MaxUSD $200,000.00/Yr.
Salary RangeThe salary range for this position represents Acuity's good faith estimate of the compensation for this job title at the time of posting. Final compensation will be determined based on factors including, but not limited to, the candidate's qualifications, experience, education, certifications, skills, geographic location, contract requirements, applicable labor categories, and, where applicable, contract award and funding.
