Penetration Tester

gTANGIBLE Corporation, a C corporation and a government contractor, is seeking a Penetration Tester to support a Transportation Security Administration Information Technology (TSA IT) Task Order. The role involves performing security attacks against IT assets, exploiting vulnerabilities to determine if further reach within the engagement scope can be obtained, and providing final reports and presentations of findings. Support for security information and event management (SIEM) detection also provided.

Requirements

• At least (12) years of technical IT security experience.
• At least (8) years of experience performing Penetration Testing.
• At least (5) years of experience performing Penetration Testing for Federal IT systems.
• Ability to work independently/minimal oversight.
• Experience using automated tools: Kali Linux, AppScan, BurpSuite, SOAPUI, AppDetective, Cobalt Strike, RedSeal, and Nessus.
• Experience with penetration testing methodologies including Open Source Intelligence, Discovery, Enumeration, Vulnerability Identification, Exploitation, and Post Exploitation techniques and tools.
• Experience with manual testing techniques.
• Required Certifications: OSCP, CEH, GWAPT, CISSP or other equivalent.
• Experience with custom programming languages: Python, Perl, Powershell, etc.
• Fluent knowledge of NIST and FIPS security controls, DISA STIGs, and CIS standards.
• Fluent in the OWASP Top 10 weaknesses.
• Experience with switches, routers, firewalls, VPN, ISE; Palo Alto firewalls;, VPN; Load Balancers, AV, Host and Network based devices, and Enterprise Security Tools.
• Fluent TCP/IP, SMB, SSH, NetBios, SOAP, REST, LDAP, SAML, SSO.