What are the responsibilities and job description for the Penetration Tester position at Carnegie Mellon University?
What We Do :
At the SEI CERT Cyber Risk and Resilience Directorate, we enable organizations to achieve operational resilience by performing research in emerging areas of operational risk, producing measurement and assessment tools that help organizations better understand their current risk and resilience posture, and developing and validating models, frameworks, and controls that improve organizations’ risk and resilience posture. Our Applied Network Defense team leads and advances the state of the art in technical cybersecurity assessment methodologies, including penetration testing and red-teaming.
Are you creative, curious, energetic, collaborative, technology-focused, and hard-working? Are you interested in making a difference by developing innovative solutions to technical cybersecurity assessment challenges for government organizations and beyond? Apply to join our team.
Position Summary :
In this role, you will join the Applied Network Defense team as a penetration testing engineer. You will contribute to penetration tests and other technical security assessments, develop and evaluate novel security testing capabilities and methodologies, and transition your knowledge and expertise to the broader community.
Requirements :
- Education and Experience : BS or equivalent degree in computer science or related technical field with 8 years of applicable experience (in roles such as penetration tester, information security engineer, network security architect, information systems auditor, or information systems analyst), or a MS or equivalent degree in a relevant discipline with 5 years of applicable experience, or a PhD or equivalent degree in a relevant discipline with 3 years of applicable experience. Certifications that demonstrate your experience and capabilities as a penetration tester (e.g., OSCP, PJPT, PenTest ) are preferred.
- Contributing to Projects in a Creative, Dynamic Environment : You have experience contributing to multiple simultaneous projects and thrive in a creative and high-energy environment. You are willing to experiment with new practices and develop effective processes, practices, and infrastructure to support successful people and projects.
- Technical Expertise : Candidates must have broad knowledge of technical cybersecurity assessment methods and related domains. This includes work experience related to penetration testing, red teaming, and technical audits.
- Travel : Frequent (15-35%) to various locations within the SEI and CMU community, customer sites, conferences, and offsite meetings.
- Security Clearance : You will be subject to a background investigation and must be able to obtain and maintain a United States Department of Defense security clearance.
Duties :
Knowledge, Skills, and Abilities :
Location
Arlington, VA, Pittsburgh, PA
Job Function
Software / Applications Development / Engineering
Position Type
Staff – Regular
Full time / Part time
Full time
Pay Basis
Salary