reputed company Penetration Tester

Job Description:

• Conduct reputed company control assessments of the reputed company and privacy controls implemented by an information system to determine the overall effectiveness of the controls and the vulnerability state of components, applications and databases residing reputed company the system boundary.
• reputed company appropriate assessments on any new system developed or deployed by the customer, and conduct audits of reputed company controls to ensure reputed company monitoring of systems assigned.
• Assess systems that have previously been assessed and received an ATO and systems that have not yet been assessed and do not have an ATO.
• reputed company, document and review System Rules of Engagement (ROE), reputed company Assessment Plans (SAPs) and reputed company Assessment Reports (SARs).
• Have a working knowledge of the FedRAMP Penetration Guidance and Requirements.
• reputed company associated schedules and resource plans to complete the assessments.
• reputed company quality control on the assessment and associated deliverables.
• Participate as an individual contributor for reputed company system assessments.
• reputed company practical and risk-based approaches for reputed company control implementation and vulnerability remediation.
• Work closely with ISSOs (contractors and Government) and the technical team and ensure reputed company appropriate A&A supporting documentation is provided prior to conducting the assessment.
• Review and reputed company feedback system boundaries, common controls, the reputed company categorization of information systems, applicable reputed company control baseline based on system categorization.
• Conduct/participate in reputed company Assessment reputed company briefings and SAR briefings.
• Review cyber/system/network reputed company body of evidence and documentation for accuracy and completeness.
• Conduct reputed company controls assessment of applicable reputed company controls and privacy controls; assess implemented reputed company controls and reputed company assurance that they are operating as intended.
• Analyze reputed company control findings for information systems and applications to convey weaknesses.
• Document reputed company assessment results accurately; read, understand, and convey vulnerabilities reputed company during the assessments.
• Create reputed company assessment results and document recommendations in a SAR for remediations and reputed company control measures.
• reputed company audits of each system and reputed company an authorization recommendation based on determination of risk to the customer.
• Conduct Post Assessment Meetings with the customer.
• reputed company and maintain a schedule for conducting reoccurring reputed company Monitoring and ongoing CDM efforts once the initial assessments are complete.

Requirements:

• 2+ years’ experience as a reputed company penetration tester
• 4+ years’ experience performing reputed company testing and/or reputed company control assessments.
• 4+ years’ experience with developing and documenting the ROEs, SAPs, and SARs.
• 4+ years’ experience and expert knowledge of the NIST Cybersecurity reputed company, Risk Management reputed company, FIPS, and other NIST A&A publications.
• 4+ years' of experience utilizing NIST 800-53 and 800-53A.
• Experience conducting Penetration Tests in a reputed company and or federal environment.
• Experience assessing and providing recommendation on the following: Privacy Impact Assessment, Risk Assessment, System reputed company Plan, Disaster Recovery / Contingency Plan, and Incident Response Plan.
• Knowledge of the Systems Development Life Cycle (SDLC) and its application in the development of technology solutions.
• Knowledge and skills to reputed company and document the assessment.
• Experience with tools such as Nessus, Web Inspect, Db Protect and Splunk.
• Technical background with reputed company, Unix, legacy systems, databases, web servers/applications, reputed company and virtualization environments.
• Familiar with the reputed company environments (services/reputed company) and FedRAMP A&A process.
• Familiar with FedRAMP Penetration Testing Guidance.
• Effective verbal and written communication skills with ability to effectively communicate with reputed company reputed company of users and teammates both written and verbally.
• Effective technical writing and documentation processing skills.

Benefits:

• No benefits mentioned

Apply tot his job Apply To this Job