Penetration Tester

We are seeking an experienced Penetration Tester to conduct and support security assessments of network-connected devices and technologies, with an emphasis on Intelligent Transportation Systems (ITS) and transportation infrastructure. This role focuses on identifying and validating security vulnerabilities through hands-on laboratory testing, evaluating device security configurations and controls, and providing actionable, risk-based remediation recommendations to clients. You can expect to spend your time accomplishing the following: • 60% of the time on Objective 1: Penetration Testing • 10% of the time on Objective 2: Project Coordination and Tracking • 10% of the time on Objective 3: Reporting Quality Assurance • 10% of the time on Objective 4: Cybersecurity Subject Matter Expert • 10% of the time on Objective 5: Personal Growth and Development. Job Responsibilities - What to Expect • Conduct penetration tests and security assessments of network-connected devices, embedded systems, web-based management interfaces, APIs, and supporting technologies. • Perform manual and automated testing to identify, analyze, and validate vulnerabilities, including weaknesses in authentication, authorization, session management, input validation, network services, and access controls. • Evaluate device configurations and security controls against industry best practices and applicable security standards. • Use security tools, scripting languages, and established testing methodologies to perform thorough and repeatable assessments. • Document testing activities, technical evidence, confirmed vulnerabilities, associated risks, and actionable remediation recommendations in professional reports. • Clearly communicate technical findings and risk-based recommendations to technical and non-technical stakeholders. • Collaborate with team members to investigate complex vulnerabilities and improve testing procedures, methodologies, and technical capabilities. • Research emerging vulnerabilities, attack techniques, security risks, and advances in penetration-testing tools and methodologies relevant to assessed technologies. Your Knowledge & Expertise • Bachelor's degree in Cybersecurity, Information Systems, or a related field preferred; equivalent work experience accepted. • 5+ years of relevant cybersecurity experience, including hands-on penetration testing experience. • Relevant security certifications such as OSCP, GPEN, PNPT, or equivalent practical experience. • Experience with tools such as Burp Suite Professional, Ghostwriter, n8n • Experience with Scripting: Perl, Python, JavaScript, bash • Demonstrable Linux Proficiency: CentOS, Ubuntu, Debian, RedHat • Strong hands-on proficiency with Burp Suite, including Proxy, Repeater, Intruder, and other tools used for manual web application and API security testing. • Demonstrated ability to analyze HTTP/HTTPS requests and responses, manipulate application traffic, and identify vulnerabilities in authentication, session management, and access controls. • Familiarity with vulnerability classification, severity scoring, and cybersecurity frameworks such as NIST, CVSS, and CWE. • Experience documenting technical security findings and developing professional penetration test reports. • Strong analytical, troubleshooting, and technical communication skills. • Ability to work independently while collaborating with a team to meet project objectives. Work Environment: this role will be in a hybrid location format. Benefits Included: • Medical Insurance • Vision Insurance • Dental Insurance • FSA Plan • Paid Time Off • 401K Retirement Savings Plan • Training & Tuition Assistance • Disability & Life Insurance