Pentester II at ECS Corporate Services in Fairfax, Virginia

Job Description:

ECS is seeking a Pentester II to work remote.



Job Description:


Are you passionate about the ever-evolving field of cybersecurity and ready to launch a career with a positive and lasting impact? Join our dynamic team at ECS, a leading provider of solutions in science, engineering, and advanced technologies, including cloud, cybersecurity, artificial intelligence (AI), data, and enterprise transformation solutions. We're searching for a Mid-Level Network/WebApp Pentester to join our dedicated MSP cybersecurity team.


As a Penetration tester at ECS, you will play a vital role in protecting our customers' digital assets by identifying potential security threats. The ideal candidate will have a strong background in ethical hacking, security assessment, and vulnerability analysis. They will be adept at identifying and exploiting vulnerabilities in various systems, applications, and networks to enhance the security posture of our customer's organizations. This role requires a proactive individual who is passionate about cybersecurity, has a keen eye for detail,


Salary Range: $120,000.00 - $150,000.00

General Description of Benefits



Required Skills:

• 
  Bachelor's degree; preferably in Computer Science, Information Security, or a related field. Will consider relevant experience in lieu of degree.
  
• Deep understanding of network security, endpoint security, and cloud security principles.
• Minimum 4 years of hands-on experience in penetration testing
• Proficiency in using a variety of penetration testing tools such as Metasploit, Burp Suite, Nessus, Nmap, Wireshark, and others.
• Relevant certifications such as Offensive Security Certified Professional (OSCP) or GIAC Penetration Tester (GPEN).
• Strong understanding of network protocols, operating systems (Windows, Linux, macOS), and web application security principles.
• Familiarity with scripting languages such as Python, JavaScript, and Bash for developing custom exploits and automation scripts.
• Must possess exceptional verbal and written communication skills. Proficiency in producing clear, detailed pentest reports for technical and non-technical audiences.
• Ability to deliver compelling presentations and briefings to stakeholders, including non-technical audiences.
• Knowledge of common security frameworks and standards such as OWASP Top Ten, NIST Cybersecurity Framework, ISO 27001, PTES, and PTF

Desired Skills:

• Familiarity with social engineering tactics to assess human vulnerabilities within the organization.
• Background in static source code analysis on multiple code languages.
• Understanding of secure coding principles and practices.
• Knowledge of additional programming languages such as C, C#, or C++.
• Familiarity with incident response processes and the ability to assist in post-incident analysis and remediation.
• Skills in assessing the security of mobile applications and devices.

ECS is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, sex, age, sexual orientation, gender identity or expression, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, status as a crime victim, disability, protected veteran status, or any other characteristic protected by law. ECS promotes affirmative action for minorities, women, disabled persons, and veterans.


ECS is a leading mid-sized provider of technology services to the United States Federal Government. We are focused on people, values and purpose. Every day, our 3800+ employees focus on providing their technical talent to support the Federal Agencies and Departments of the US Government to serve, protect and defend the American People.


General Description of Benefits



Apply Now