IT Security Specialist - Penetration Tester

About the position

AttainX, Inc. is in search of a highly energetic Penetration Tester to join our team on a cyber security program supporting our US federal government client. We’re looking for a highly skilled and experienced professional with a minimum of 5 years of proven expertise in penetration testing and ethical hacking to join our team. In this role, you’ll take a hands-on approach to identify, exploit, and report security weaknesses across diverse environments, including AWS, Azure, and on-premises infrastructure. Your work will directly contribute to fortifying critical systems and protecting sensitive data from evolving cyber threats. If you thrive in dynamic, high-stakes environments and excel at devising creative solutions to complex security challenges, we want to hear from you. Join us in our mission to build a safer digital future.

Responsibilities

  • Protocol analysis, vulnerability discovery and exploitation, post exploitation impact analysis, and physical security.
  • Highly technical problem-solver who understands software architectures, security, communication protocols, virtualization, and hardware, and work with other engineers to the resolution of problems in design, development, and operations.
  • Perform manual and automated firmware analysis on target devices.
  • Perform pen tests, fuzzing and custom exploit attacks against client systems.
  • Review deployment architectures, topologies and conops for compliance regulatory security mandates.
  • Produce security reports suitable for submission to regulatory bodies.
  • Conduct hands-on technical testing beyond automated tool validation, including full exploitation and leveraging of access within multiple environments.
  • Conduct scenario-based security testing, or red teaming to identify gaps in detection and response capabilities of client end systems.
  • Conducting research and testing in support of client requirements.
  • Designing, implementation, and integration of security solutions.
  • Designing, development and support of the company’s line of technology products.
  • Analyzes information security systems and applications.
  • Recommends and develops security measures to protect information against unauthorized modification or loss.
  • Familiar with a variety of the field’s concepts, practices, and procedures.
  • Relies on experience and judgment to plan and accomplish goals.
  • Performs a variety of complicated tasks.

Requirements

  • A minimum of 5 years of proven penetration testing and ethical hacking experience.
  • Hands-on experience in penetration testing across AWS, Azure, and On-Premise environments.
  • At least 5 years of recent experience (within the last 6 years) in applying IT security concepts, methodologies, principles, procedures and using industry-standard IT security tools (e.g. Burp Suite, Metasploit, Wireshark).
  • At least 5 years of recent experience (within the last 6 years) with enterprise architecture methodologies, concepts, procedures, principles, and tools.
  • At least 5 years of recent experience (within the last 6 years) in contingency planning and backup and recovery best practices and application of NIST guidance in this area.
  • At least 5 years of recent experience (within the last 6 years) in using technical testing tools (Tenable Security Center, ArcSight, IBM Big Fix, etc.).
  • At least 5 years of recent experience (within the last 6 years) in conducting penetration testing or the ability to bring in a penetration tester when required.
  • At least 5 years of performing assessments of Federal Information Systems using the Risk Management Framework.
  • Possess at least one of the following Certifications or be able to Obtain within six (6) months of hire: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), GIAC Certified Incident Handler (GCIH), GIAC Systems and Network Auditor (GSNA), Electronic Commerce Council Certified Ethical Hacker (CEH), ISC2 Certified in Governance, Risk and Compliance (CGRC), Security Certified Network Professional (SCNP), Security Certified Network Architect (SCNA).
  • Proficiency in handling multiple tasks concurrently.
  • Proficiency in project and time management.
  • Ability to adjust to changing priorities.
  • Ability to work in a cohesive team-oriented environment.
  • Must be a US Citizen able to obtain and maintain a Moderate Public Trust.

Nice-to-haves

  • Knowledge of DOC, NOAA, and NWS IT security policies and implementation standards or those of similar sized organizations AND comprehensive understanding of NIST guidance toinclude NIST Special Publications and Federal Information Processing Standards.
  • Self-starter, highly motivated individual who adapts to a dynamic work environment.
  • Strong attention to detail with an ability to operate effectively across multiple priorities.

Benefits

  • paid vacation
  • medical
  • dental
  • vision
  • matching 401K plan
  • tuition/training reimbursement
  • Long & Short-Term Disability
Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...

Other Jobs To Apply

Sales Executive (Small- Midsize Business Aetna Dental/Vision)

Employee Assistance Program – Work-life Customer Support Associate

Architect Product Security

United Airlines Logistics Coordinator (Remote)

United Airlines Reservations Representative (Remote)

Delta Airlines Remote Customer Support - Work From Your Own Home

Costco Remote Positions

American Remote Jobs, American Express Data Analyst Jobs @ Joblagii ( Senior Analyst )

American Express Virtual Customer Care Jobs, Wfh American Express @ Get Dream Job

national business manager – Licensed Coffeehouses - Albertsons Companies (remote based - U.S.)

Call Center Agent (PT or FT - 100% Work From Home)

Remote Disney Vacation Specialist

Remote Disney Vacation Specialist

Customer Service Representative - Remote Data Entry Clerk

amazon work from home $15+/ Hour (Sign on Bonus!)!

Apple Home Advisor - [Part Time] Remote Jobs

Remote Customer Service Representative - Tesla Work-From-Home Opportunity with Competitive Pay

YouTube Content Moderator Jobs Remote $27H – (WFH)

Senior Creative Designer, Creative Publishing [Remote]

Manager, Member Innovation - Data Engineering [Remote]

Databricks SME (Remote)

Delivery Solutions Architect, Oil & Gas (Remote)

Enablement Partner

Staff Data Scientist, ML (Credit Risk)

Staff Software Engineer, Privacy & Safety Regulations

Operational Readiness Manager

Top Seller Customer Support

SME – Public Assistance Programs EBT/SNAP/TANF – Remote

Policy Support Specialist, Ads & Monetization Ops [Remote]

Lead, Global Markets Strategy [Remote]

Administrative Assistant, Media - Focus Features [Remote]

Software Engineer [Remote]

Director, Remote Productions

Remote Customer Success Manager - Grow Outcomes

Virtual Customer Account Manager Sales Representative - Outbound

Principal Solutions Architect, Utilities Vertical

Verizon Wireless Sales Specialist

Finance Leadership Development Program

Account Executive, Business Sales - Anaheim/Fullerton, CA

CDL Class A Driver (Reefer Truck)

HR Contact Center Representative - REMOTE

Junior Splunk Developer - J.B. Hunt

Evening Data Entry Clerk (Full Time, $20/Hr Start)

National Account Execuive

Global Forwarding Agent (Ocean Export)

Associate Analyst, Workforce Analytics - Hybrid

Regional Sales Manager-Northeast

Multi-Skill Operator/Lease Operator (Nights) - North Midland Basin

ERA Agent

Remote Physician Coding Auditor & Educator Flexible Hours