Job Type

Full-Time

Career Level

Mid-Senior Level

Education

Bachelor's Degree

Travel

None

Security Clearance Required

Ability to obtain and maintain a U.S. Security Clearance

Job Description

At Lifescale Analytics, we help achieve data-driven decisions by leveraging strategic technologies to create innovative solutions that ultimately help our clients to navigate their ever-changing data landscape. We have an opportunity for a Application Security Tester Level III, local to Eagan, MN but open to remote for highly qualified candidates. The Cybersecurity Risk Management Portfolio Team is in need of 1 Application Security Tester supporting its Vulnerability Management & Assessments. 

Responsibilities:

• Selects the appropriate technical tests, network or vulnerability scan tools, and/or pen testing tools based on review of requirements and purpose; lists all steps involved for executing selected test(s) and coaches others in the use of advanced research, development, or scan tools and the analysis of comparative findings between proposed and current technologies.
• Performs joint interoperability testing on systems exchanging electronic information with systems of other services or nations, and determines whether the system is certified as interoperable based on analysis of results; provides recommendations on how to enable systems to operate effectively together.
• Additional responsibilities are requested by the client.

Job Requirements

• 5 years of software testing experience with a history performing hands on, web application penetration testing in a variety of diverse environments.
• Provide technical security assessments of applications and infrastructure, security design reviews as well as risk assessments. This is a hands-on role, requiring technical skills from the hardware to the application layer.
• Highly skilled in web application testing, API testing, and network testing
• Prior experience with Burp Suite Professional, or other similar DAST tools
• Experience with Kali Linux and most of the tools available in the distro for penetration testing
• Experience with tools such as Metasploit Pro and Cobalt Strike for red team operations
• Experience with Red Team engagements from planning to execution
• Experience with phishing network users to gain access for lateral movement on the network
• Experience with Purple Team engagements to test monitoring controls in coordination with engineering teams and CSOC teams.
• Proficiency in scripting, such as Python and/or Powershell
• Experience with penetration testing supporting PCI-DSS
• Technical writing skills, along with ease in communicating concepts related to security vulnerabilities and attack path scenarios.
• Familiar with OWASP Application Security Verification Standard (ASVS) and MITRE ATT&CK framework
• Penetration testing certification recommended. Acceptable certifications: Offensive Security Certified Professional (OCSP), Global Information Assurance Certification (GIAC) Certifications (e.g., GIAC Certified Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), or GIAC Exploit Researcher and Advanced Penetration Tester (GXPN))

EDUCATION: 

• Bachelor degree in an information technology discipline or equivalent IT experience.

CERTIFICATIONS: (One or more required)

• CompTIA Net
• CompTIA A
• CompTIA Security
• CPTE - Certified Penetration Testing Engineer or CEH - Certified Ethical Hacker GSEC

We are equal opportunity/affirmative action employers, committed to diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status, or any other protected characteristic under state or local law.