Penetration Tester

Job Title: Penetration Tester

Job Location: Remote

Eligibility/Clearance: Ability to obtain and maintain a Public Trust

clearance and successfully pass a thorough Government background

screening process requiring the completion of detailed forms and

fingerprinting.

This position has a U.S. residency requirement. The USPS security

clearance process requires the selected candidate to have resided in the

U.S. (including U.S. Territories) for the last five years as follows:

- U.S. Citizens cannot have left the U.S. (including U.S. Territories)

for longer than 6 months consecutively in the last 3 years (unless

they meet certain exceptions).

- Non-U.S. Citizens cannot have left the U.S. (including U.S.

Territories) for longer than 90 days consecutively in the last 3

years.

WHAT YOU’LL NEED TO SUCCEED:

Education:

- Bachelor's Degree in Computer Science or related technical

discipline, preferred but not required.

- NOTE: If resources do not have a relevant college degree, an

additional 4 years of relevant work experience is required.

Required Experience:

- Prior experience with Burp Suite Professional, or other similar DAST

tools

- Experience with AI and penetration testing AI

- Experience with Kali Linux and most of the tools available in the

distro for penetration testing

- Experience with tools such as Metasploit Pro and Cobalt Strike for

red team operations

- Experience with Red Team engagements from planning to execution

- Experience with phishing network users to gain access for lateral

movement on the network

- Experience with Purple Team engagements to test monitoring controls

in coordination with engineering teams and CSOC teams.

- Proficiency in scripting, such as Python and/or PowerShell

- Experience with penetration testing supporting PCI-DSS

- Technical writing skills, along with ease in communicating concepts

related to security vulnerabilities and attack path scenarios.

- Familiar with OWASP Application Security Verification Standard

(ASVS) and MITRE ATT&CK framework

- Penetration testing certification recommended. Acceptable

certifications: Offensive Security Certified Professional (OCSP),

Global Information Assurance Certification (GIAC) Certifications

(e.g., GIAC Certified Penetration Tester (GPEN), GIAC Web

Application Penetration Tester (GWAPT), or GIAC Exploit Researcher

and Advanced Penetration Tester (GXPN))

Arena Technical Resources, LLC (ATR) is an Equal Opportunity Employer

(EOE) who will provide equal employment opportunity to employees and

applicants for employment without regard to race, ethnicity, religion,

color, sex, pregnancy, national origin, age, veteran status, ancestry,

sexual orientation, gender identity or expression, marital status,

family structure, genetic information, or mental or physical disability.