Sr. Penetration Tester

Sr. Penetration Tester

Job Category: Engineering

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI with Polygraph

Employee Type: Regular

Percentage of Travel Required: None

Type of Travel: None

* * *

The Opportunity:

Are you ready to shape the future of intelligence systems? CACI is seeking a talented Penetration Tester to join our team in Herndon, VA. If the idea of working with and among a team of true cyber security engineering experts with world class and unique skills excites you, then this might be the opportunity for you! Individuals with experience in or across a range of technical disciplines in IT and cybersecurity engineering, possessing a strong desire to serve in a role delivering great mission impact, fit in well with our team and find this role highly rewarding.

Be part of a department with an expanding range of programs focusing on Cyber Operations, where you get to grow on and between programs with peers who are dedicated to advancing national security. Participate in fun team outings and team building events where you get to engage with your co-workers and expand your career network. We are a fun, engaging environment with a management team focused on growing your career and making you a part of our future. We offer bonus compensation plans that demonstrate you being appreciated for working on the program and being a part of our team. You'll get paid for cyber events and training, such as our Capture the Flag Events, Internal Research and Development opportunities as well as prepaid courses to nationally recognized certification courses to grow your career. You can learn more about our program by accessing the landing page: VORPAL Jobs (caci.com)

Responsibilities:

You will lead small project teams with specific experience planning and executing penetration tests in a Windows environment. You will be called upon to solve technical puzzles every day using your breadth of computer, network, and applications pen-testing experience.  As a functional member of a cyber red team, you will look for creative ways to break into a range of customer systems and illustrate to stakeholders what could happen if an adversary were to take aim at their network.

Qualifications:

Required: 

• Must have an active TS/SCI with required Polygraph clearance
• University Degree or equivalent experience and minimum of 15+ years of related work experience
• Must have expertise in Windows penetration testing tools and techniques
• Ability to clearly communicate findings through written and oral products

• System level and security administration knowledge of computer operating systems. Operating system experience shall be with the identified release or later of any of the following: UNIX, Linux, Windows 7, Windows 10, Windows Server
• Understanding of network vulnerability analysis and penetration testing with both open-source and commercial tools such as: Nmap, Wireshark, Metasploit, Kali, Burp, etc.
• Computer hardware and software security analysis including use of commercial or specialty application analysis and reverse engineering tools such as: IDA Pro, WinDebug, Olly Debug, EnCase, and WinHex
• Experienced in use of network security technologies such as: firewalls, proxies, iptables, AV solutions, VPN’s, IDS/IPS, etc.
• Experience with kernel-level programming in either the Windows or Linux environment, low-level software development, Windows and Linux device drivers, operating system internals, and kernel debugging
• In-depth expertise in one or more of the following areas:
  • Internal working functions and scripting of common workgroup applications such as word processing, spreadsheet, and group ware. This includes products such as Microsoft Word and Excel, Microsoft Exchange, etc.
  • Database systems such as Oracle, MSSQL, Postgresql, etc.
  • Commercial TCP/IP firewall/IDS/IPS and Anti-Virus products
  • Networking protocol stacks and implementations
  • Ability to program, in Cor other languages
  • Public Key Infrastructures including development, administration, digital certificates, and encryption systems
  • Telecommunications protocols such as TCP/IP, ISDN, etc.

• Must have experience in Windows and Linux environment, plus intermediate-to-advanced abilities in at least one of the following:
• Microsoft Windows / Active Directory
• Linux (CentOS, Red Hat, Ubuntu, Debian, etc.)
• Virtual environments such as, but not limited to: ProxMox, VMWare ESXi, Virtualbox
• Cloud Computing (i.e.