Penetration Tester

About Specialized Security Services, Inc.

For over two decades, our expert team has successfully assisted organizations with the implementation and oversight of their information security, privacy, and regulatory compliance programs. Our reputation is our own, built upon our steadfast commitment over the years to do the right thing and go above and beyond for our clients. We pride ourselves on our ability to think outside-the-box, stay nimble and succeed as a team. Additionally, education is important to Specialized Security Services, Inc. We encourage all team members to grow their knowledge base through continuing education, and as such offers reimbursement for industry related certifications.

Position Summary

The Cybersecurity Penetration Tester role offers an exciting opportunity to work on a range of high-profile client engagements while continuing to deepen their skills and broaden their impact on the security community as a whole.

The Penetration Tester (Ethical Hacker) will be responsible for identifying and exploiting security vulnerabilities in networks, applications, and systems by simulating real-world cyberattacks. They are responsible for testing, documenting, and reporting security weaknesses while recommending remediation strategies to strengthen defenses. Key skills include network security, scripting, and using hacking tools. 

They will work with team members and clients during penetration and vulnerability management engagements, as a trusted partner and cybersecurity professional to complete the cybersecurity contracted services dictated in the engagements and agenda call to meet and exceed client expectations. The Penetration Testor will perform penetration testing using the S3 Security methodologies based off of regulatory and industry requirements and standards, as well as security best practice frameworks.

The Cybersecurity Penetration Tester is a trusted advisor to clients, and through objective penetration testing and results reporting, supports the client in making well-informed, risk-based decisions to improve overall security posture.

Responsibilities 

• Conduct network, web application, API, cloud, database, OT, wireless, mobile, social, and other types of penetration testing, code reviews, social engineering, red team engagements, and physical security assessments.
• Conduct security assessments on a wide variety of technologies and implementations.
• Simulate sophisticated cyberattacks for clients worldwide.
• Being part of a global team of penetration testers, sharing knowledge and methodologies.
• Running and conducting penetration test projects with minimal oversight.
• Perform Vulnerability Assessments, Penetration Test, Ethical Hacking, Firewall Assessments, Social Engineering engagements.
• Manage priorities and tasks to achieve utilization targets.
• Advise clients on technical security or compliance activities.
• Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.
• Participate in the development and implementation of the enterprise security architecture and supporting security standards to ensure compliance with corporate policies, and relevant legislative and regulatory requirements.
• Either handle or escalate client and project-related issues in a timely manner.
• Collaborates with the business operation, digital business teams and quality assurance to drive customer satisfaction.
• Pursues additional, industry‑relevant certifications as needed to stay ahead of emerging threats and maintain advanced proficiency in the role.
• Maintain all certifications that are active at the time of hire and any certifications obtained during employment.
• Other duties, as assigned.

Qualifications & Experience

• 2+ years of professional experience in a penetration testing role.
• Ensures quality reports and services are delivered efficiently and on time.
• Should be well versed in all aspects of penetration testing, with an emphasis on web applications, internal networks, and external networks.
• Problem solving skills and the ability to work under pressure in a fast-paced environment.
• Experience with security hardening techniques and policy development, particularly regarding secure software development methodologies and process
• In depth knowledge of Windows/Linux/UNIX operating systems
• Demonstrates advanced knowledge of the principles, best practices architecture and design approaches to applicable capabilities, services, and standard controls.
• Experience with one or more IT security compliance frameworks (PCI, NIST, ISO, CIS)
• Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
• Operates with professionalism both internally and with clients.

Education & Certifications

• A university degree in Computer Science, Engineering, or related work experience.
• Offensive Security Certifications preferred, such as OSCP, OSWE, OSEP, OSCE
• CREST CRT, CCT INF, CCT APP, CCRTS, CCSAS
• EC-Council CPENT, WAHS
• SANS GIAC GXPN, GCPN, GPYC, GPEN, GWAPT, GRTP, GX-PT
• Certified Ethical Hacker (CEH)
• Vulnerability Management/Assessment tools
• Penetration Testing tools
• The penetration tester understands that, due to the rapidly evolving cybersecurity landscape, maintaining this role will require obtaining additional certifications to keep up with the cyber security threat landscape and industry acceptable certifications.

To All Agencies: Please, no phone calls or emails to any employee of Specialized Security Services, Inc. outside of the Talent Acquisition Team. Agencies must have a valid fee agreement in place and they must have been assigned the specific requisition to which they submit resumes, by the Talent Acquisition Team. Any resume submitted outside of this process will be deemed the sole property of Specialized Security Services, Inc. and in the event a candidate is submitted outside of this policy is hired, no fee or payment of any kind will be paid.