Penetration Tester
Dark Wolf Solutions3 months ago
Washington, DC, USAEntry Level
Base Salary
$130k - $145k/yr
Responsibilities
- Conduct penetration testing and vulnerability assessments across hardware, software, firmware, embedded systems, networks, and cloud environments.
- Analyze software, firmware, hardware, RF components, secure boot processes, and Trusted Execution Environments.
- Develop and execute exploits and proof-of-concept attacks to demonstrate vulnerability impact.
- Perform web application, API, wireless, RF, Wi-Fi, Bluetooth, and Zigbee security testing.
- Use Software Defined Radio for protocol reverse engineering and testing.
- Manually verify vulnerabilities and assess their risk, exploitability, remediation effort, and business impact.
- Plan and execute cross-domain vulnerability assessments, network penetration tests, and phishing or social-engineering campaigns.
- Document detailed findings and provide actionable product-security remediation recommendations.
Requirements
- At least 2 years of experience in three or more relevant areas, including penetration testing, network security, exploit development, reverse engineering, hardware or software engineering, vulnerability assessment, or social engineering.
- Proficiency with AWS, Microsoft Azure, and Google Cloud Platform deployments.
- Experience testing mobile operating systems, embedded systems, and/or IoT devices.
- Experience conducting advanced vulnerability scanning, web application security assessments, OWASP Top Ten testing, and API security testing.
- Experience drafting reports, documenting case details, and summarizing findings and recommendations.
- Strong written, verbal, and analytical skills.
- Strong understanding of NIST 800-53 frameworks.
- U.S. citizenship and an active security clearance at the Secret level or higher.
- Preferred bachelor’s degree in Cybersecurity, Information Technology, Computer Engineering, or a related field.
- Preferred experience developing complex exploits and proof-of-concept attacks, firmware and binary exploitation, embedded-systems testing, SDR, and protocol reverse engineering.
- Active certifications such as CEH, OSCP, PNPT, GPEN, or similar are preferred.
Benefits
- Hybrid work environment supported in the DC Metro area; position located in Colorado Springs, CO.
- Potential 1099 hourly opportunity is available.
- EEO/AA employer.
Tech Stack
Categories
About Dark Wolf Solutions
Dark Wolf provides DevSecOps agile software development, information operations, penetration testing and incident response, applied research and rapid prototyping, machine learning, and mission support and engineering services to the Intelligence Community, national security, and Fortune 500 customers. By combining the most innovative emerging technologies with deep federal domain expertise, Dark Wolf operates at the nexus of technical innovation and mission needs.