Gray Tier Technologies is seeking a Web App Penetration Tester to support our DHS customer based out of Springfield Virginia.

Primary Responsibilities:

• Knowledge of penetration testing best practices and tool usage.
• Experience conducting penetration testing in the following disciplines:
  • Web Application testing
  • Network Penetration testing
  • API and serverless penetration testing
  • Cloud based penetration testing (one of the three):
    • AWS
    • Microsoft Azure
    • Google Cloud Platform (GCP)
• Capable of working within guidance to safely support penetration testing operations as part of a managed team.
• Detailed knowledge of web application and network based penetration testing security tools.
• Provide expert level guidance to the customer regarding penetration testing and vulnerability assessment industry best practices.

Qualifications:

• Bachelors' degree from an accredited college in a related discipline, or equivalent experience/combined education, with 8+ years of professional experience; or 6+ years of professional experience with a Masters' degree.
• In addition to specific security clearance requirements all Department of Homeland Security SOC employees are required to obtain an Entry on Duty (EOD) clearance to support this program.
• 2 years in Pen Testing and Vulnerability Assessment
• 2-3 years of professional experience in incident detection and response, malware analysis, or cyber forensics.
• Experience with any three of the seven tools listed below:
  • Kali Linux
  • Metaspoilt
  • Burp suite
  • Cobalt Strike
  • Tenable Nessus
  • Web Inspect
  • Scuba
  • App detective
  • PACU
  • AWS CLI
  • Scout Suite
• Active Top Secret clearance with SCI eligibility

Preferred Qualifications:

• Prior DHS IT security and/or audit experience preferred.

• Prior System Administrator experience a plus.

• Previous IT experience is preferred, specifically 7 years of professional experience in a Computer Science discipline is ideal.

• Penetration testing experience with Kubernetes and or Docker

• Mobile Application penetration testing experience

• Wireless penetration testing experience

• DHS Risk and Vulnerability Assessment (RVA) Operator certified

CLEARANCE REQUIRED :
• Must be have a current Public Trust or Secret clearance. Top Secret/SCI clearance preferred.

• Must be able to obtain and maintain an DHS Entry on Duty (EOD) clearance