Hacker-Application Penetration Testing

About the Role

As an Application Security Penetration Tester, you will assess the IT security risk of an organization by attempting to breach security systems, identifying weaknesses, and determining how to improve enterprise information security. You will contribute to the design, development, and implementation of countermeasures, system integration, and tools specific to Cyber and Information Operations.

Key Responsibilities

• Evaluate System Security: Evaluate system security configurations, perform analysis of complex software systems to determine functionality and intent, and identify weaknesses in security systems.
• Conduct Penetration Testing: Attempt to hack into networks to access information without authorization, documenting and analyzing findings to determine root causes and recommend countermeasures.
• Develop and Implement Countermeasures: Contribute to the design, development, and implementation of countermeasures, system integration, and tools specific to Cyber and Information Operations.
• Prepare Technical Reports: Prepare and present technical reports and briefings to Technical and Executive teams, detailing attempts, conclusions, and recommended countermeasures.
• Analyze Client Environment: Analyze client business and security environment, conduct in-depth analysis of problem areas, and develop proposals to address these areas.

Requirements & Tech Stack

• System Security Analysis: Experience working with system security configurations, evaluating findings, and performing root cause analysis to identify weaknesses in security systems.
• Complex Software Systems Analysis: Exposure to analysis of complex software systems to determine both functionality and intent of software systems.
• Penetration Testing Methodologies: Experience working with penetration testing methodologies, including attempting to hack into networks to access information without authorization.
• Countermeasure Development: Exposure to the design, development, and implementation of countermeasures, system integration, and tools specific to Cyber and Information Operations.
• Technical Reporting: Experience preparing and presenting technical reports and briefings to Technical and Executive teams, detailing attempts, conclusions, and recommended countermeasures.

Qualifications

Preferred Education: Master's Degree

Preferred Technical and Professional Experience

• Reverse Engineering Skills: Exposure to reverse engineering techniques to analyze and understand software systems, identifying potential vulnerabilities and weaknesses. Ability to vet and weaponize identified vulnerabilities through reverse engineering.
• Mainframe Application Knowledge: Experience working with mainframe applications, understanding their security configurations and potential weaknesses, and developing strategies to improve their security posture.
• Cybersecurity Tools Familiarity: Exposure to various cybersecurity tools and technologies, including those used for penetration testing, vulnerability assessment, and countermeasure development.