Hacker-Application Penetration Testing

About the Role

As an Application Security Penetration Tester, you will assess the IT security risk of an organization by attempting to breach security systems, identifying weaknesses, and determining how to improve enterprise information security. You will contribute to the design, development, and implementation of countermeasures, system integration, and tools specific to Cyber and Information Operations.

Key Responsibilities

• Evaluate system security configurations, perform analysis of complex software systems to determine functionality and intent, and identify weaknesses in security systems.
• Conduct penetration testing, attempting to hack into networks to access information without authorization, documenting and analyzing findings to determine root causes and recommend countermeasures.
• Contribute to the design, development, and implementation of countermeasures, system integration, and tools specific to Cyber and Information Operations.
• Prepare and present technical reports and briefings to Technical and Executive teams, detailing attempts, conclusions, and recommended countermeasures.
• Analyze client business and security environment, conduct in-depth analysis of problem areas, and develop proposals to address these areas.

Requirements & Tech Stack

• Security Systems Analysis: Experience working with system security configurations, evaluating findings, and performing root cause analysis to identify weaknesses in security systems.
• Complex Software Systems Analysis: Experience with analysis of complex software systems to determine both functionality and intent.
• Penetration Testing Methodologies: Experience working with penetration testing methodologies, including attempting to hack into networks to access information without authorization.
• Countermeasure Development: Experience in the design, development, and implementation of countermeasures, system integration, and tools specific to Cyber and Information Operations.
• Technical Reporting: Experience preparing and presenting technical reports and briefings to Technical and Executive teams, detailing attempts, conclusions, and recommended countermeasures.

Qualifications

• Reverse Engineering Skills: Experience with reverse engineering techniques to analyze and understand software systems, identifying potential vulnerabilities and weaknesses. Ability to vet and weaponize identified vulnerabilities through reverse engineering.
• Mainframe Application Knowledge: Experience working with mainframe applications, understanding their security configurations and potential weaknesses, and developing strategies to improve their security posture.
• Cybersecurity Tools Familiarity: Experience with various cybersecurity tools and technologies, including those used for penetration testing, vulnerability assessment, and countermeasure development.
• Preferred Education: Master's Degree