What are the responsibilities and job description for the Cloud Security Pen Tester (must have DoD Clearance) position at SandTech Solutions?
Job Summary
At SandTech Solutions we are committed to “Enabling Success” of our client’s missions. As such, we are searching for a highly skilled and motivated person who has:
Minimum Clearance Required
It is the policy of SandTech Solutions to provide an equal employment opportunity for all applicants and employees. The Company does not unlawfully discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, national origin, ancestry, age, medical condition, disability, workers’ compensation status, or veteran status.
Job Information Summary
Location: San Antonio, TX - HYBRID
Job Type: 40 hours per week
At SandTech, our employees enjoy benefits to support their physical, financial, and emotional wellness. These benefits include comprehensive medical, dental and vision plans, 401(k), life insurance, paid time off program with paid holidays and various wellness programs. Additionally, our career path planning assists employees with their professional goals.
At SandTech Solutions we are committed to “Enabling Success” of our client’s missions. As such, we are searching for a highly skilled and motivated person who has:
Minimum Clearance Required
- Active DOD Top Secret Clearance
- Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
- CompTIA Security or equivalent IAT Level II certification.
- Certification in ethical hacking, penetration testing, or related field (e.g., CEH, OSCP, OSWE)
- Experience with containerization technologies such as Docker and Kubernetes
- AWS Experience: Demonstrated hands-on experience with AWS services, including but not limited to EC2, S3, IAM, VPC, and AWS Security services.
- Kubernetes Experience: Proficiency in Kubernetes, including deployment, configuration, and security best practices.
- Threat Intelligence: Strong understanding of threat intelligence sources and techniques.
- Security Frameworks: Familiarity with security frameworks and standards (e.g., NIST, CIS).
- Threat Intelligence experience
- Analytical Skills: Strong analytical and problem-solving skills, with the ability to think critically in high-pressure situations.
- Communication Skills: Excellent written and verbal communication skills, including the ability to convey technical information to non-technical stakeholders.
- Team Player: Collaborative mindset with the ability to work effectively within cross-functional teams.
- Experience with scripting languages such as Python, Bash, or PowerShell
- Familiarity with security tools such as Nmap, Metasploit, Nessus, and Burp Suite
- Ability to identify and prioritize security risks and vulnerabilities
- Excellent written and verbal communication skills
- Strong problem-solving skills and attention to detail
- Ability to work independently and as part of a team
- Conduct security assessments, vulnerability scans, and penetration tests on our Kubernetes and AWS cloud environment
- Identify and prioritize security risks and vulnerabilities
- Work closely with DevOps team to implement security measures and remediate vulnerabilities
- Develop and maintain testing scripts and tools
- Stay up-to-date with the latest security threats, vulnerabilities, and best practices
- Provide recommendations for improving the security of our Kubernetes and AWS cloud environment
- Prepare and present reports to management and stakeholders on the results of security assessments and penetration tests
- Threat Detection and Analysis: Monitor security events and alerts to identify and analyze potential threats and vulnerabilities.
- Incident Response: Collaborate with incident response teams to investigate and respond to security incidents effectively.
- Security Assessment: Conduct security assessments of AWS environments and Kubernetes clusters to identify and address weaknesses.
- Vulnerability Management: Manage and remediate vulnerabilities in cloud and containerized environments.
- Security Best Practices: Stay up-to-date with security best practices for AWS and Kubernetes and ensure their implementation.
- Threat Intelligence: Continuously gather and analyze threat intelligence to proactively identify emerging threats and vulnerabilities.
- Policy Compliance: Ensure compliance with security policies, procedures, and standards, and recommend improvements when necessary.
- Security Awareness: Assist in the development and delivery of cybersecurity training and awareness programs.
- Prolonged periods of sitting at a desk and working on a computer.
- Must be able to lift up to 15 pounds at times.
It is the policy of SandTech Solutions to provide an equal employment opportunity for all applicants and employees. The Company does not unlawfully discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, national origin, ancestry, age, medical condition, disability, workers’ compensation status, or veteran status.
Job Information Summary
Location: San Antonio, TX - HYBRID
Job Type: 40 hours per week
At SandTech, our employees enjoy benefits to support their physical, financial, and emotional wellness. These benefits include comprehensive medical, dental and vision plans, 401(k), life insurance, paid time off program with paid holidays and various wellness programs. Additionally, our career path planning assists employees with their professional goals.
