Spence Consulting, Inc.

Job Title: Penetration Testing Specialist

Job Description:
We are seeking a skilled Penetration Testing Specialist to conduct comprehensive assessments of our organization's publicly facing and internal applications and infrastructure. The ideal candidate will have expertise in both Black Box and Grey Box testing methodologies, with a focus on identifying vulnerabilities and weaknesses that could be exploited by external attackers and malicious insiders. Importantly, all testing activities must be conducted with strict adherence to maintaining the confidentiality, integrity, availability, and operation of our systems, data, and applications.

Key Responsibilities:

• Conduct Black Box penetration testing on publicly facing applications and infrastructure to simulate attacks from external threat actors with no approved system access.
• Perform Grey Box penetration testing on internal applications and infrastructure to simulate attacks from malicious insiders who may have legitimate access to the system.
• Identify and exploit security vulnerabilities, misconfigurations, and weaknesses in systems, networks, and applications.
• Utilize a variety of tools and techniques to perform reconnaissance, vulnerability scanning, and exploitation.
• Document all findings, including detailed descriptions of vulnerabilities, their potential impact, and recommended remediation measures.
• Ensure that penetration testing activities do not impact the confidentiality, integrity, availability, or operation of systems, data, or applications.
• Work closely with internal stakeholders, including IT teams and software developers, to prioritize and address identified security issues.
• Provide guidance and recommendations for improving the security posture of systems and applications based on penetration testing results.
• Stay current with emerging security threats, vulnerabilities, and industry best practices related to penetration testing.
• Prepare and present comprehensive penetration testing reports to management and relevant stakeholders, including evidence of compromised systems without risking operational disruptions.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or related field. Advanced degree preferred.
• At least 3-5 years of experience in conducting penetration testing, preferably in both Black Box and Grey Box scenarios.
• Strong understanding of network protocols, operating systems, and web application technologies.
• Proficiency in using penetration testing tools such as Metasploit, Burp Suite, Nmap, and Kali Linux.
• Experience with scripting and programming languages such as Python, PowerShell, or Ruby.
• Knowledge of common security frameworks and standards such as OWASP, PCI DSS, and NIST.
• Excellent analytical and problem-solving skills, with the ability to think like an attacker and anticipate potential attack vectors.
• Effective communication skills, with the ability to clearly articulate technical concepts to both technical and non-technical audiences.
• Relevant certifications such as OSCP, OSWE, CEH, or CISSP are highly desirable.
• Strong commitment to maintaining the highest standards of ethics and integrity in all penetration testing activities.

If you have a passion for cybersecurity and the skills to identify and address complex security challenges, we invite you to join our team as a Penetration Testing Specialist. Apply now and help us strengthen our defenses against cyber threats.

Job Type: Contract

Pay: $60.00 - $65.00 per hour

Expected hours: 40 per week

Compensation package:

• 1099 contract

Experience:

• Prentesting: 3 years (Required)
• Pentesting: 3 years (Required)

Ability to Commute:

• Aurora, IL (Required)

Work Location: Hybrid remote in Aurora, IL