Report this Job
Hi,
I am Saurabh Kumar in the process of identifying excellent employee for our client's needs. Please review the requirement that I have posted below & let me know if you would like us to present your resume.
Job Title: Systems Analyst III - Penetration Testing
Location: Falls Church VA
Duration: Long Term contract
Job Description:
Systems Analyst supporting the Vulnerability Management & Assessments (VMA) program at the Client. The resource will be supporting Penetration Testing (PEN) and will be working with the RISK: (VMA) Team, and will be responsible for working in a team environment to conduct research/analysis of current and emerging Cyber Threats. Will define requirements, test concepts, test equipment, develop data collection requirements for tests.
Requirements:
Highly skilled in web application testing, API testing, and network testing
Prior experience with Burp Suite Professional, or other similar DAST tools
Experience with Kali Linux and most of the tools available in the distro for penetration testing
Experience with tools such as Metasploit Pro and Cobalt Strike for red team operations
Experience with Red Team engagements from planning to execution
Experience with phishing network users to gain access for lateral movement on the network
Experience with Purple Team engagements to test monitoring controls in coordination with engineering teams and CSOC teams.
Proficiency in scripting, such as Python and/or Powershell
Experience with penetration testing supporting PCI-DSS
Technical writing skills, along with ease in communicating concepts related to security vulnerabilities and attack path scenarios.
Familiar with OWASP Application Security Verification Standard (ASVS) and MITRE ATT&CK framework
May provide supervisory, technical, and administrative direction for personnel performing system development tasks, including the review of work products for correctness, adherence to the design concept and to user standards, and for progress in accordance with schedules.
Formulates statements of management, scientific and business problems, and devises procedures for solutions of problems.
Penetration testing certification recommended.
Acceptable certifications:
Offensive Security Certified Professional (OCSP),
Global Information Assurance Certification (GIAC) Certifications (e.g., GIAC Certified Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), or GIAC Exploit Researcher and Advanced Penetration Tester (GXPN))
EXPERIENCE LEVEL:
4 years related work experience or eight years related work experience post high school
3 years experience in information systems programming
3 years experience in systems specification or structured analysis
3 years experience with project or process management
EDUCATION:
Must possess a minimum of a Bachelors Degree in Computer Science, Information Technology or Information Security (Masters Degree preferred).
CERTIFICATIONS: (One or more required)
-CompTIA Security +
-CPTE - Certified Penetration Testing Engineer or CEH - Certified Ethical Hacker
-Certified Information System Security Professional (CISSP)
Should you be interested, please send me a copy of your resume in Word/PDF format along with the following details ASAP.
Full Name:
Current Location:
Work Authorization:
Salary / Rate expectation:
Thanks & Regards
Saurabh Kumar
InfiCare Technologies| 22375 Broderick Drive #225 Dulles VA 20166 |
703.652.4804 Direct | saurabh@infiCareTech.com
Staffing Services since 2001 MBE Certified
*Recipient of Annual si100 Award*
The annual si100 award is given to companies "which display the characteristics of long-term visibility, sustained growth, business focus, profitability and customer and employee value-creation. The esteemed list consists of companies that have made a mark in their area of expertise."
InfiCare Technologies
