Penetration Tester

Job Title: Consultant

• Penetration Tester Job Type: 1099
• Independent Contractor Location: Remote
• US Overview: Chaotic Good Information Security (CGIS) is seeking talented and driven Penetration Testing Consultants to join our specialized team! We're an Austin, Texas based offensive security-focused firm, committed to delivering world class white-glove professional services. We assist companies looking for significant maturity shifts, necessitating quick responses and complex problem-solving. Ideal candidates for this role have significant experience delivering full scope assessments. As a boutique consultancy, we offer significant flexibility in this role. We are currently experiencing significant growth and are looking to build the core of a highly technical, world class, and hacker-driven professional services team.

Responsibilities

Conduct penetration testing on a dynamic range of customer systems, networks, and applications to identify vulnerabilities and assess security risks. Write detailed reports outlining testing procedures, findings, and recommendations for remediation. Collaborate with internal teams to implement security measures and best practices.

Stay current on the latest cybersecurity trends, tools, and techniques. Assist with security incident response and remediation efforts as needed. Minimum Requirements: 3 years of experience in planning, conducting, and delivering web application or internal network penetration tests. Familiarity with modern cybersecurity risk frameworks (NIST, BSIMM, MITRE, etc.)

Hands-on experience with common penetration testing tools such as Metasploit, Burp Suite, Nmap, PDTM, and tools typically found on a base Kali installation. Strong communication and problem-solving skills. Strong technical reporting and documentation skills. Ability to work independently and as part of a team.

Preferred Qualifications

Previous consulting experience at a services-oriented consultancy. Previous experience in CTF competitions or Hack The Box challenges. Active engagement on Bugcrowd, Hacker. One, Intigriti, or other bug bounty and responsible disclosure programs. Previous conference speaking experience (OWASP/BSides/Defcon/Blackhat/etc.)

KLCP, OSCP, OSWP, OSEP, OSCE, OSWA, OSWE, or equivalent certifications. Although certifications are not required, candidates with these or similar certifications may be prioritized. Software development, scripting, and payload writing experience. Role Benefits: Remote first work/life balance. Commitment to professional development and active mentorship.

Access to a wide variety of cybersecurity problems across numerous domains. Training reimbursement for role relevant certifications. Chaotic Good Information Security LLC is an equal opportunity employer and does not discriminate on the basis of race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, or any other protected status.

We adhere to all applicable laws regarding the prohibition of asking candidates about their criminal backgrounds. VmxST1Yy. Vldj. RlJSYmt. KclVUSlNObE5WWkhk. TlYwMTZWVm. RrV21KVldq. Wlhi. RkphVFVWNFJGRn. RiR3RYUmtad. Vdr. Ukt. WbUp0VG5SV1Yy. UmFUVEZh. TlZsV1l6Vk5WMDQxVVdwT2FGSj. ZhRz. VhUldNMVpHMUdOVk. ZxUW1oU01WWnVXa1Zr.

YzJSR2NGUl. Jha0pw. WlZWS2NsZHNaRTlr. YkhCSVZsZGth. RmRHUmpGVFZWWTBZa2RTUkZGcVJtc. GxWVXA1V1cwd05VMHdiRWxpU0Zwcl. YwVn. NibHBGWkc5a2JWSll. Xa2M1YTFORk1XNVpha2t3V2p. Gd1dFNVhjR3Bp. Ylhneldr. Vmtj. MlJ0U25CUm. FrcHFa. VlZLYz. FsdE1VOWtiSEJJWWtoV1lXVlZTbm. RaYld4RFRVZEdTRlpYWk. VwaVYz. ZzJVMVZvVTJJeGNGbFRiWGhLVWpCYU1Wc. Fdh.

Rk5pTWtaWVRs. YzFTb. El4V25w. WmVrc. FdXakpXV0U5VVJrdE5iRVp1V1d0a2My. TnNj. RlJSYWt. KcFpWVkpkMWRz. WkRSak1He. EpWbTV3U21GVl. NqWlhiR1JQVFVkR1dFOVlWVDA9