Penetration Tester

Our New Teammate We are seeking an experienced Penetration Tester to conduct and support security assessments of network-connected devices and technologies, with an emphasis on Intelligent Transportation Systems (ITS) and transportation infrastructure. This role focuses on identifying and validating security vulnerabilities through hands-on laboratory testing, evaluating device security configurations and controls, and providing actionable, risk-based remediation recommendations to clients.

You can expect to spend your time accomplishing the following: 60% of the time on Objective 1: Penetration Testing 10% of the time on Objective 2: Project Coordination and Tracking 10% of the time on Objective 3: Reporting Quality Assurance 10% of the time on Objective 4: Cybersecurity Subject Matter Expert 10% of the time on Objective 5: Personal Growth and Development.

Job Responsibilities

– What to Expect Conduct penetration tests and security assessments of network-connected devices, embedded systems, web-based management interfaces, APIs, and supporting technologies. Perform manual and automated testing to identify, analyze, and validate vulnerabilities, including weaknesses in authentication, authorization, session management, input validation, network services, and access controls.

Evaluate device configurations and security controls against industry best practices and applicable security standards. Use security tools, scripting languages, and established testing methodologies to perform thorough and repeatable assessments. Document testing activities, technical evidence, confirmed vulnerabilities, associated risks, and actionable remediation recommendations in professional reports.

Clearly communicate technical findings and risk-based recommendations to technical and non-technical stakeholders. Collaborate with team members to investigate complex vulnerabilities and improve testing procedures, methodologies, and technical capabilities. Research emerging vulnerabilities, attack techniques, security risks, and advances in penetration-testing tools and methodologies relevant to assessed technologies.

Your Knowledge & Expertise Bachelor’s degree in Cybersecurity, Information Systems, or a related field preferred; equivalent work experience accepted. 5+ years of relevant cybersecurity experience, including hands-on penetration testing experience. Relevant security certifications such as OSCP, GPEN, PNPT, or equivalent practical experience.

Experience with tools such as Burp Suite Professional, Ghostwriter, n8n Experience with Scripting: Perl, Python, JavaScript, bash Demonstrable Linux Proficiency: CentOS, Ubuntu, Debian, Red. Hat Strong hands-on proficiency with Burp Suite, including Proxy, Repeater, Intruder, and other tools used for manual web application and API security testing.

Demonstrated ability to analyze HTTP/HTTPS requests and responses, manipulate application traffic, and identify vulnerabilities in authentication, session management, and access controls. Familiarity with vulnerability classification, severity scoring, and cybersecurity frameworks such as NIST, CVSS, and CWE. Experience documenting technical security findings and developing professional penetration test reports.

Strong analytical, troubleshooting, and technical communication skills. Ability to work independently while collaborating with a team to meet project objectives. Work Environment: this role will be in a hybrid location format.

Benefits

Medical Insurance Vision Insurance Dental Insurance FSA Plan Paid Time Off 401K Retirement Savings Plan Training & Tuition Assistance Disability & Life Insurance