IA Penetration Tester

General info:

Citizenship Required: US Citizenship

Job Duration: Temporary/Per Engagement

Site:  On-site, Washington, DC

Digital Global Connectors, LLC is seeking a part-time Penetration Tester to support our federal client in Washington, DC. The Pen Tester will conduct security tests on web-based applications, networks, and other types of computer systems to identify and remediate vulnerabilities.

Primary Responsibilities

• Security Testing: Conduct formal and routine security tests on web-based applications, networks, and other types of computer systems to uncover vulnerabilities.
• Security Assessments: Support the security assessment activities of servers, computer systems, and networks, ensuring thorough evaluations are completed.
• Audit Support: Assist in security audit activities, both from a theoretical and a hands-on technical perspective.
• Open Source Code Review: Conduct and support reviews of open-source code to identify potential security risks.
• Solution Recommendations: Recommend and implement information assurance/security solutions that meet customer requirements effectively.
• Incident Handling: Identify, report, and resolve security incidents or violations promptly.
• Compliance and Analysis: Establish and satisfy information assurance and security requirements based on the analysis of user demands, policies, regulatory environments, and resource constraints.
• Vulnerability Analysis: Perform detailed vulnerability and risk analyses of computer systems and applications during all phases of the system development life cycle.

Required Qualifications

• Experience: Proven track record in penetration testing with documented success in identifying and remediating vulnerabilities.
• Technical Skills: Proficiency in manual testing and extensive use of penetration testing tools such as Metasploit, Burp Suite, Wireshark, and Nessus. Strong programming and scripting background.
• Penetration Testing Tools: Advanced knowledge of Kali Linux and its associated tools, enabling a comprehensive approach to security testing.
• Malware Expertise: Skills in malware reverse engineering are essential for identifying and analyzing potential threats.
• Framework Knowledge: Thorough knowledge of the NIST Risk Management Framework and experience implementing its guidelines.
• Soft Skills: Ability to work effectively in fast-paced environments, with strong organizational skills and attention to detail. Excellent problem-solving capabilities and analytical skills.
• Communication: Outstanding verbal and written communication skills are crucial for documenting findings and making recommendations.

Preferred Qualifications

• Education: A degree in Information Security or a related field is highly desirable.
• Certifications:
  • Certified Ethical Hacker (CEH)
  • GIAC Penetration Tester (GPEN)
  • Certified Information Systems Security Professional (CISSP)
  • Offensive Security Certified Professional (OSCP): Highly regarded certification for hands-on penetration testing skills.

About DGC:

DGC is a Top-Secret Facilities cleared, Woman-Owned Small Business (WOSB) founded in 2012 that offers cyber security engineering, consulting, training, and operations services. For over 25 years, DGC personnel have served the American public by enabling and supporting the missions of critical U.S. government agencies. DGC integrates cutting-edge security services with commercial best practices to assist government and private sector organizations in understanding and optimizing their cyber security posture.