Manually exploit and compromise networks, web applications, databases, and cloud services to include privilege escalation and lateral movement
Identify vulnerabilities, misconfigurations, and compliance issues
Write final reports, defend all findings to include the risk or vulnerability, mitigation strategies, and references
Ability to meet and coordinate with various audiences to include developers, system administrators, project managers, and senior government stakeholders
Provide security recommendations for developers, system administrators, project managers, and senior government stakeholders
Report vulnerabilities identified during security assessments
Write penetration testing Rules of Engagements (RoE), Test Plans, and Standard Operating Procedures (SOP)
Produce actionable, threat-based reports on security testing results
Conduct security reviews, technical research, and provide reporting to increase security defense mechanisms
Experience with NIST 800-53 and Risk Management Framework
WHAT YOU’LL NEED TO SUCCEED
Education: Bachelor's Degree (Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline)
Required Experience: 6+ yrs
Clearance: TS/SCI with Polygraph
Required Technical Skills
Experience with NIST 800-53, NIST 800-115, and Risk Management Framework
Desired Certifications
CEH - Certified Ethical Hacker Certification, CPT - Certified Penetration Tester
Desired Skills
Certifications: CEH – Certified Ethical Hacker Certification, CPT – Certified Penetration Tester
Strong writing skills
Experience with AWS Cloud Security
Security Clearance Level: TS/SCI with active polygraph
Location: McLean, VA - On Customer Site
GDIT IS YOUR PLACE
401K with company match
