Penetration Tester

A-LIGN employs a business model that builds on the best of what the largest corporate security firms have to offer, such as the ability to offer high quality professionals a variety of project experience with high profile clients. What sets us apart is that we have eliminated time reporting, chargeability goals, and sales pressure.

As a pen tester with A-LIGN, you will be part of a dedicated pen testing team whose sole purpose is to test and improve the security of our clients’ systems and data, across a wide range of industries. The team utilizes a broad range of tools and is constantly evolving to discover new vulnerabilities and security weaknesses.

Your responsibilities will include planning and executing penetration testing under the direction of a member of the management team.

• Execute internal, external, wireless, and web application pen tests 
• Execute social engineering tests, including phishing, vishing, and physical 
• Execute vulnerability scans and assessments 
• Compile and write client reports 
• Navigate the Kali system from the command line only  
• Create, modify, move, and write files and documents from the command line only 
• Create and write Bash scripts from the command line 
• Reimage devices and virtual machines with Kali Linux 

EDUCATION  

Currently pursuing a degree in cybersecurity, management information systems, computer science, or combination of skills and experience.

EXPERIENCE  

Experience working on cloud infrastructure, system administration, network administration, security operations. Experience performing network and application pen tests.

CERTIFICATIONS 

One of the following certifications:

• OSCP/eCPPT or other related penetration testing certifications.
• eWPT or other applicable web app cert.

SKILLS 

• Hands on experience performing penetration testing from a network layer to web application layer including competition of a quality report
• Hands on experience with CTF and exploitation tools, HackTheBox profile a plus
• Background and understanding on networking, firewalls, and subnets
• Previous IT Administrator experience working with both Windows and Linux systems
• Security Operations/Incident Response experience a plus, but not required
• Active member of any other security focused community
• Understanding of security best practices
• Thrives in a fast-paced environment
• Excellent communication skills  
• Ability to work individually as well as collaboratively  
• A high degree of motivation
• A security focused mindset
• Understanding and experience with AWS, Azure, and GCP

STRONG DESIRE TO LEARN PENETRATION TESTING FROM THE GROUND UP INCLUDING:

• Internal and External testing both cloud and legacy
• Wireless, and web applications and API
• Mobile Application testing
• Social engineering tests (phishing, vishing, and physical)
• Vulnerability scans and assessments
• Compile and write client reports
• Utilize Kali Linux and security tools within the distro
• Create, modify, move, and write files and documents from the command line only
• Create and write Bash scripts from the command line
• Reimage devices and virtual machines with Kali Linux

• Generous Paid Time Off Plan  
• Remote/In-Office Hybrid
• Employer Paid Life Insurance and Disability Insurance   
• Paid Office Closure December 25-January 1   
• Paid Holidays Schedule   
• Certification Reimbursement  

A-LIGN is the leading provider of high-quality, efficient cybersecurity compliance programs. Combining experienced auditors and audit management technology, A-LIGN provides the widest breadth and depth of services including SOC 2, ISO 27001, HITRUST, FedRAMP, and PCI. A-LIGN is the number one issuer of SOC 2 and HITRUST and a top three FedRAMP assessor. To learn more, visit a-lign.com.

Apply online today at A-LIGN.com and learn about life at A-LIGN by following us on LinkedIn. 
A-LIGN is an Equal Opportunity Employer! Minorities, women, disabled, and veterans encouraged to apply!