Penetration Tester

The Penetration Tester will simulate realistic adversary behavior to identify and exploit security weaknesses across networks, applications, and systems. In this onsite role in Plano, TX, you will test, document, report findings, and support remediation planning to help clients make risk-based security and compliance decisions.

What You Will Do

• Perform penetration testing and related activities across networks, web applications, APIs, cloud, databases, OT, wireless, mobile, social, and other environments.
• Deliver security assessments across a wide range of technologies and implementations.
• Run penetration test and ethical hacking engagements, including vulnerability assessments, firewall assessments, and social engineering activities.
• Conduct code reviews and execute red team engagements, including sophisticated cyberattack simulations for clients worldwide.
• Support projects with minimal oversight, including planning and execution of penetration testing engagements.
• Collaborate with a global penetration testing team by sharing knowledge, methodologies, and learnings.
• Manage priorities and daily tasks to achieve utilization targets.
• Advise clients on technical security activities and compliance-related work.
• Produce comprehensive reports that cover assessment findings, outcomes, and recommendations for further security improvement.
• Handle or escalate client and project-related issues in a timely manner.
• Participate in developing and implementing enterprise security architecture and supporting security standards to align with corporate policies and relevant legislative and regulatory requirements.
• Work with business operations, digital business teams, and quality assurance to drive customer satisfaction.
• Maintain active certifications required for the role and pursue additional, industry-relevant certifications as needed to keep pace with emerging threats.
• Complete other duties as assigned.

Required Qualifications

• 2+ years of professional experience in a penetration testing role.
• Ability to deliver quality reports and services efficiently and on time.
• Broad familiarity with penetration testing, with emphasis on web applications, internal networks, and external networks.
• Strong problem solving skills and capability to work under pressure in a fast-paced environment.
• Experience with security hardening techniques and policy development, particularly for secure software development methodologies and process.
• In-depth knowledge of Windows, Linux, and UNIX operating systems.
• Advanced understanding of architecture, design approaches, best practices, and standard controls for applicable capabilities and services.
• Experience with at least one security compliance framework, such as PCI, NIST, ISO, or CIS.
• Hands-on experience with security systems including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, and content filtering.
• Professional conduct with both internal teams and clients.

Technologies

• Windows, Linux, UNIX
• PCI, NIST, ISO, CIS
• Firewalls, intrusion detection systems
• Anti-virus software, authentication systems
• Log management, content filtering

Education and Certifications

Education: A university degree in Computer Science, Engineering, or related work experience.

• Offensive security certifications preferred, such as OSCP, OSWE, OSEP, OSCE
• CREST credentials such as CRT, CCT INF, CCT APP, CCRTS, CCSAS
• EC-Council certifications such as CPENT, WAHS
• SANS GIAC certifications such as GXPN, GCPN, GPYC, GPEN, GWAPT, GRTP, GX-PT
• Certified Ethical Hacker (CEH)
• Vulnerability Management/Assessment tools experience
• Penetration testing tools experience

Given the rapidly evolving cybersecurity landscape, maintaining this role requires obtaining additional certifications to stay current with industry acceptable certifications and the threat landscape.

Agency Instructions

• No phone calls or emails to any Specialized Security Services, Inc. employee outside the Talent Acquisition Team.
• Agencies must have a valid fee agreement in place and be assigned the specific requisition to which they submit resumes by the Talent Acquisition Team.
• Any resume submitted outside of this process will be deemed the sole property of Specialized Security Services, Inc.
• If a candidate is submitted outside this policy and is hired, no fee or payment of any kind will be paid.