Penetration Tester
Avertium is the security partner that companies turn to for end-to-end Cybersecurity solutions that attack the chaos of the cybersecurity landscape with context. By fusing together human expertise and a business-first mindset with the right combination of technology and threat intelligence, Avertium delivers a more comprehensive, more programmatic approach to cybersecurity - one that drives action on the ground and influence in the boardroom. That's why over 1,200 mid-market and enterprise-level organizations across 15 industries turn to Avertium when they want to be more efficient, more effective, and more resilient when waging today's cyber war. Show no weakness.®Avertium is seeking a Penetration Tester. Job duties include, but are not limited to, performing network-based penetration tests, which range from external, internal, cloud, Purple and Red Team projects. Other responsibilities will include support, client development, and conflict resolution. The successful candidate will be self-disciplined and able to work on individual tasks, sometimes without well-defined requirements, and must work well in a team environment. The Penetration Tester should have a combination of experience and/or certifications. Experience should be identified by previous job duties, published work, or public presentations. The requirements for this position are:
Qualifications for Success:
- 2-5+ years of experience in a penetration testing specific role is required.
- Experience in consulting is preferred.
- At least one or more certifications such as OSCP, OSEP, GCPN, GPEN, GXPN, or comparable are required.
- Certifications such as OSWE, OSEP GWAP, GMOB, CRTO, CISSP, CCSP, or Burp Suite Certified Practitioner are a plus.
- Experience in Red Teaming engagements preferred.
- Experience in executing social engineering tactics, such as phishing, pretexting phone calls, is required.
- Experience with physical penetration testing is preferred.
- Experienced in vulnerability assessment and penetration testing methodologies is required.
- Understanding of various cloud providers and cloud penetration testing methodologies is required.
- A strong understanding of various forms of network architecture is required.
- Information Security Fundamentals - 4 years of experience, BS degree (or higher) in a technical discipline.
- Familiar with multiple scripting or programming languages such as C, Java, Ruby, Perl, Python, and PowerShell.
- Willing to travel if needed but not to exceed 10% of the year.
Ideal Personal Characteristics:
- Verbal and written communication skills.
- Documentation skills.
- Interpersonal and conflict resolution skills.
- Customer service-oriented capabilities.
- Creative problem solving and analytical thinking.
- Willing to accept new challenges and learn in new areas.
- Flexible and responsive to changing situations; adaptable to changing requirements.