Skyline Technology Solutions, LLC is hiring an experienced Penetration Tester for a hybrid role in Glen Burnie, MD. This position focuses on hands-on security assessments of network-connected technologies with an emphasis on Intelligent Transportation Systems (ITS) and transportation infrastructure. You will help identify vulnerabilities, evaluate security controls, and produce clear, risk-based recommendations backed by strong technical evidence.
Compensation for this role is USD 125,000 to 150,000 per year. The opportunity includes medical, vision, and dental insurance, an FSA plan, paid time off, a 401(k) retirement savings plan, training and tuition assistance, plus disability and life insurance.
Responsibilities
- Conduct penetration tests and security assessments of network-connected devices, embedded systems, and web-based management interfaces, including APIs and supporting technologies.
- Run manual and automated testing to identify, analyze, and validate vulnerabilities, including issues related to authentication, authorization, session management, input validation, network services, and access controls.
- Assess device configurations and security controls against industry best practices and applicable security standards.
- Use security tools, scripting languages, and established testing methodologies to deliver thorough, repeatable assessments.
- Document testing activities, technical evidence, confirmed vulnerabilities, associated risks, and actionable remediation recommendations in professional reports.
- Communicate findings and risk-based recommendations to technical and non-technical stakeholders.
- Collaborate with team members to investigate complex vulnerabilities and improve testing procedures, methodologies, and technical capabilities.
- Research emerging vulnerabilities, attack techniques, security risks, and advances in penetration-testing tools and methodologies relevant to assessed technologies.
Requirements
- Education: Bachelor’s degree in Cybersecurity, Information Systems, or a related field preferred; equivalent work experience accepted.
- Experience: 5+ years of relevant cybersecurity experience, including hands-on penetration testing.
- Certifications or equivalent practical experience: OSCP, GPEN, PNPT, or equivalent.
- Experience with tools such as Burp Suite Professional, Ghostwriter, and n8n.
- Scripting experience: Perl, Python, JavaScript, bash.
- Demonstrable Linux proficiency with CentOS, Ubuntu, Debian, or RedHat.
- Strong hands-on proficiency with Burp Suite, including Proxy, Repeater, Intruder, and other tools used for manual web application and API security testing.
- Ability to analyze HTTP/HTTPS requests and responses, manipulate application traffic, and identify vulnerabilities in authentication, session management, and access controls.
- Familiarity with vulnerability classification and severity scoring, including NIST, CVSS, and CWE.
- Experience documenting technical findings and producing professional penetration test reports.
- Strong analytical, troubleshooting, and technical communication skills.
- Ability to work independently while collaborating with a team to meet project objectives.
Technologies: Burp Suite Professional, Ghostwriter, n8n, Perl, Python, JavaScript, bash, CentOS, Ubuntu, Debian, RedHat, Proxy, Repeater, Intruder, HTTP, HTTPS, OSCP, GPEN, PNPT, NIST, CVSS, CWE
