Pen Tester - DragonFli Washington D.C., DC, USA Bookmark Share Print 516 3 8

Listing Description

Working as part of our client service team, you will help resolve our clients’ strategic technology and cyber risk issues.

This includes gathering and analyzing information, formulating and testing hypotheses, and developing (technically & functionally) and communicating recommendations. You will use your expertise and handle a variety of cyber risk topics, including IT infrastructure, Software development, and technology risk. You will help us to integrate strategic perspectives and approaches with actual operations and process redesign capabilities.

Additionally, you will help Dragonfli develop our expertise in this area and you’ll have the opportunity to shape this fast-growing initiative. As a consultant, you will receive exceptional training as well as frequent coaching and mentoring from colleagues.University degree ideally in computer science, mathematics or business degree with specialization in technology management

Relevant work experience in a professional services environment or industry/tech company

Proven experience in cyber security strategy, technology development, and risk-based digital resilience transformations

Practical knowledge in IT risk management, information security and technology risk

Proven record of leadership in a work setting and/or through extracurricular activities

Ability to communicate complex ideas effectively – both verbally and in writing

Carry out application, network, systems and infrastructure penetration tests

Review physical security and perform social engineering tests where appropriate

Evaluate and select from a range of penetration testing tools

Keep up to date with latest testing and ethical hacking methods

Deploy the testing methodology and collect data

Report on findings to a range of stakeholders

Make suggestions for security improvements

Enhance existing methodology material

Utilize pen testing tools

Coordinate and monitor patch/remediation discovery, assessment, testing and deployment activities

Collect and document patch testing and deployment evidence

Document change control/release management tickets

Coordinate Mitigation plan development and management

Interface with appropriate vendors when troubleshooting activities arise from patching

Address concerns, issues, or problems with remediation activities

Develop lessons learned and continuous improvement process

Must have superior communications skills (both verbal and written) as this role will serve as the "face" of the department's security team to component agencies. Candidate must provide writing samples.

Public Trust Clearance (only) and 5-panel drug screen pre-employment required

Good understanding of network protocols

Solid technical skills in both information security architecture and penetration testing

Ability to assess testing tools and deploy the right ones

Project planning skills

A solid understanding of ethical hacking

Scripting and programming experience is beneficial

Ability to explain findings to non-technical professionals

Excellent report writing and presentation skills

Customer facing skills and a proven track-record of building client relationships

Able to work independently but also as part of a team

Flexibility to change direction and manage conflicting demands

Outstanding organisational and data analytics skills

Comfortable working in a fast-paced environment