Cybersecurity Penetration Tester - Senior Consultant

Job Family:

Cyber Consulting

Travel Required:

Up to 10%

Clearance Required:

Ability to Obtain Top Secret (TS)

Job Description Summary

• Responsible for designing and recommending solutions across all cyber areas. Creates solutions that will protect proprietary and confidential data and systems. Leverages in-depth knowledge of cyber environment to investigate, mitigate, and implement processes and procedures to correct intrusions. Conducts proactive cyber risk assessments to identify previously undetected vulnerabilities or intrusions. Assists clients to manage tasks associated with network permissions, system permissions, and application permissions. Implements processes for monitoring onboarding and terminations, rights to applications, and rights and permissions to file shares across multiple operating systems and platforms.

What You Will Do:

Provide penetration testing services using a variety of tactics, techniques, and procedures to identify exploitable vulnerabilities in networks and systems while also measuring compliance with organizational security policies, testing whether staff are aware of security issues, and ultimately determining the organization’s risk to cybersecurity threats.

• Perform network mapping and reconnaissance, document Rules of Engagement to guide the scope, develops test plan, and assists with acquiring management approval.  
• External Testing: Conduct a variety of penetration tests based on system’s criticality, test objectives, and organization’s requirements to include:
  • Working with IT personnel to define scope for targeted testing
  • Mimicking an outside attacker to gain access to system and what information can be accessed.
• Internal Testing: Mimic an outside an insider attack to determine risk employees with various access levels pose to the organization.
• Red Team Testing: Focus testing activity towards accessing specific target datasets. Testing methodology should include crafted e-mails, custom public websites, exploit code, and social engineering.
• Analyze test results, develop a report on discovered vulnerabilities, and provide risk-based recommendations to remediate those vulnerabilities.

What You Will Need:

• Active or previously active TS clearance or Secret with ability to obtain TS clearance
• Minimum of three years in cybersecurity penetration testing
• Bachelor’s degree
• Excellent oral and written communication and presentation skills.
• Communicates effectively and demonstrates leadership role with clients and fellow team members.
• Previous passing of the CISA AES HVA Assessment or ability to pass the CISA AES HVA Assessment course

What Would Be Nice To Have:

• Experience supporting US government cybersecurity programs
• Offensive Security Certified Professional (OSCP) or GIAC Penetration Tester (GPEN) or Certified Ethical Hacker (CEH) Certification
• CISSP or CISM
• Experience managing direct client engagement team to deliver impactful support to Federal clients.
• Experience with managing/supporting and/or knowledge of cybersecurity or high value asset program.
• Experience conducting HVA assessment, or performing Risk and Vulnerability Assessments
• Knowledge of Cybersecurity Framework, Risk Management, NIST 800-83 Rev 5,
• Experience developing and maintaining working relationships while serving Federal clients onsite.
• Ability to identify obstacles and opportunities that impact the success of plans or initiatives.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Position may be eligible for a discretionary variable incentive bonus

• Parental Leave and Adoption Assistance

• 401(k) Retirement Plan

• Basic Life & Supplemental Life

• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts

• Short-Term & Long-Term Disability

• Student Loan PayDown

• Tuition Reimbursement, Personal Development & Learning Opportunities

• Skills Development & Certifications

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Emergency Back-Up Childcare Program

• Mobility Stipend

About Guidehouse
G