Penetration Tester

Wolf is seeking a Penetration Tester to join our growing and well-established national firm. As a Penetration Tester, you will help support the DenSecure team through a variety of tasks related to delivering and enhancing various security services provided to our clients. The successful candidate possesses strong communication skills, has a desire to be challenged in a dynamic work environment, and is looking to find a place to continue their career within a rapidly growing team. Our testing is primarily manual, hands-on-keyboard work that does not solely rely on commercial scanning tools or automated exploitation. While an important skill, if your previous testing role primarily involved running a scanner combined with Metasploit or another automated tool, this role may be a challenge for you. DenSecure testers all contribute to the day-to-day operations of the team. A successful candidate will be willing to perform both client and non-client facing tasks, including but not limited to: report writing, testing infrastructure maintenance, setup, distribution to clients, and internal projects that arise that the team needs hands for. This is not a role for candidates that seek to work as individuals that do not have to interface with others daily.

• Communicate testing approach, methodology, scope, findings, reports, and other relevant information to clients in a professional manner in both written and spoken form
• Write penetration test reports and other documents in a professional tone and for the appropriate audience
• Perform a variety of security assessments, including internal network, external network, and social engineering to include phishing, vishing, and possibly physical testing
• Maintain knowledge of latest tactics, techniques, and procedures for testing during engagements and maintenance of client security posture

Necessary Qualifications:

• Must have 1-2 years of working experience exclusively in penetration testing in a client facing role (this is an absolute must to be considered). This experience must involve testing in corporate production environments
• Familiarity with standard attack paths and leveraging open-source tools used to target production environments (i.e. Impacket, BloodHound, NetExec, etc.)
• Be willing to learn from and teach others
• Good time management skills without the need for micromanagement
• Strong English communication skills (written and oral) 6 you will be required to present report findings during meetings with C-Suite and upper management roles

Nice to Have Qualifications:

• OSCP/OSEP/OSAI/CRTO or other information security certifications that prove hands on keyboard knowledge (we value proven technical skills over certifications)
• Write for or own a technical blog
• Have ongoing projects that can enhance the teams skill set
• Having a demonstrated specialty within the offensive security domain which can include but is not limited to maintaining basic testing infrastructure, web application skills, or a proficiency in social engineering

The salary range for this position is $90,000 - $135,000.

Actual compensation within the range will be dependent upon the individual's skills, experience, qualifications and location, and applicable employment laws. In addition to base pay, you may be eligible to participate in our performance-based incentive compensation or sales commission plans. In addition, Wolf offers a wide range of benefits including spot awards, 401(k) savings, flexible work, and a generous total rewards and benefits package