Senior Penetration TesterResponsibilities include but not limited to:• Develop and operationalize a Pentest program• Create necessary Policies, standards and procedures to support the Pentest program• Conduct web application, mobile application, network, wireless, and operational technology penetration tests• Conduct security assessments of cloud environments and application source code review• Conduct penetration tests in accordance with standard methodologies (i.e. OWASP, NIST, PTES)• Use common penetration testing and red-team tools, tactics, techniques, and procedures• Utilize custom penetration testing tools, frameworks, and infrastructure• Assess risk of discovered vulnerabilities based on likelihood and severity of exploitation• Document and deliver technical reports on detailed findings and vulnerability remediation recommendations• Collaborate with clients throughout an assessment on status and vulnerability information• Evolve existing capabilities and toolsetDesired Skills:• Familiarity with Security Content Automation Protocols (SCAP), Common Vulnerabilities and Exposures (CVE), Common Vulnerability Scoring System (CVSS), Common Weakness Enumeration (CWE), or Common Platform Enumeration (CPE)• Experience creating/developing programs from scratch• Experience drafting policies, Standards and procedures• Penetration Testing in 3 or more of the following:o Web Applicationso Network (Internal / External)o Active Directoryo Mobile Applicationso Cloud Environmentso Phishing• Tools / Services:o NMAPo BurpSuiteo CrackMapExeco BloodHoundo Ansibleo Terraformo Git• AWSQualifications/Requirements:• Bachelor’s Degree in IT related field or higher OR 10 years experience in an information technology field with a minimum of 3 years of cyber security experience• At least 2 years of experience related to conducting penetration tests or red-team assessments• Offensive Security Certified Professional preferred but not required: OSCP experience and knowledge required• General knowledge and understanding of information security and privacy-related regulations