Penetration Tester

Our New Teammate

We are seeking an experienced Penetration Tester to conduct and support security assessments of network-connected devices and technologies, with an emphasis on Intelligent Transportation Systems (ITS) and transportation infrastructure. This role focuses on identifying and validating security vulnerabilities through hands-on laboratory testing, evaluating device security configurations and controls, and providing actionable, risk-based remediation recommendations to clients. You can expect to spend your time accomplishing the following:

• 60% of the time on Objective 1: Penetration Testing
• 10% of the time on Objective 2: Project Coordination and Tracking
• 10% of the time on Objective 3: Reporting Quality Assurance
• 10% of the time on Objective 4: Cybersecurity Subject Matter Expert
• 10% of the time on Objective 5: Personal Growth and Development.

Job Responsibilities – What to Expect

• Conduct penetration tests and security assessments of network-connected devices, embedded systems, web-based management interfaces, APIs, and supporting technologies.
• Perform manual and automated testing to identify, analyze, and validate vulnerabilities, including weaknesses in authentication, authorization, session management, input validation, network services, and access controls.
• Evaluate device configurations and security controls against industry best practices and applicable security standards.
• Use security tools, scripting languages, and established testing methodologies to perform thorough and repeatable assessments.
• Document testing activities, technical evidence, confirmed vulnerabilities, associated risks, and actionable remediation recommendations in professional reports.
• Clearly communicate technical findings and risk-based recommendations to technical and non-technical stakeholders.
• Collaborate with team members to investigate complex vulnerabilities and improve testing procedures, methodologies, and technical capabilities.
• Research emerging vulnerabilities, attack techniques, security risks, and advances in penetration-testing tools and methodologies relevant to assessed technologies.

Your Knowledge & Expertise

• Bachelor’s degree in Cybersecurity, Information Systems, or a related field preferred; equivalent work experience accepted.
• 5+ years of relevant cybersecurity experience, including hands-on penetration testing experience.
• Relevant security certifications such as OSCP, GPEN, PNPT, or equivalent practical experience.
• Experience with tools such as Burp Suite Professional, Ghostwriter, n8n
• Experience with Scripting: Perl, Python, JavaScript, bash
• Demonstrable Linux Proficiency: CentOS, Ubuntu, Debian, RedHat
• Strong hands-on proficiency with Burp Suite, including Proxy, Repeater, Intruder, and other tools used for manual web application and API security testing.
• Demonstrated ability to analyze HTTP/HTTPS requests and responses, manipulate application traffic, and identify vulnerabilities in authentication, session management, and access controls.
• Familiarity with vulnerability classification, severity scoring, and cybersecurity frameworks such as NIST, CVSS, and CWE.
• Experience documenting technical security findings and developing professional penetration test reports.
• Strong analytical, troubleshooting, and technical communication skills.
• Ability to work independently while collaborating with a team to meet project objectives.

Work Environment: this role will be in a hybrid location format.