Cleared Penetration Tester

About the role

Forteum is a trusted leader in cloud and cybersecurity services, delivering independent, third-party, vendor-agnostic regulatory assessment and advisory services, alongside advanced cybersecurity offensive and compliance technical solutions. Our team supports Fortune 500 companies and leading cloud service providers, focusing on regulatory compliance frameworks including FedRAMP, CMMC, FISMA, SOC, PCI, ISO, and HIPAA.

Responsibilities

• Conduct network, application (API, mobile, and web), and social engineering penetration testing
• Work closely with all team members to achieve customer objectives
• Advise customers on vulnerabilities, remediation strategies, and compliance requirements
• Prepare final deliverables within established timelines
• Maintain positive relationships with customers and stakeholders
• Coordinate project readiness with internal teams and customers
• Pursue continuous professional development by achieving industry-specific certifications (FedRAMP certification requirements must be met)
• Perform project readouts with customers to inform them of the test outcomes
• Train and mentor junior team members
• Interface with customers and other internal delivery team members throughout the engagement

Qualifications

• Bachelor’s Degree or 4 years of equivalent job experience
• 2+ years of professional services experience
• 3+ years of web application and network penetration testing experience
• Proficient in at least one or more scripting languages (e.g., bash, python, PowerShell, ruby, etc.)
• Strong technical acumen with regards to penetration testing methodologies
• Familiarity with best practices frameworks such as OWASP, MITRE ATT&CK, OSSTMM, and/or PTES
• Ability to work in a SCIF in Northern Virginia or Seattle, Washington
• Active Top Secret clearance or ability to obtain one

Preferred Skills

• eCPPT, OSCP, OSCE, OSWE, or GPEN certifications
• Ability to quickly assess new and leading-edge technologies and concepts
• Proven analytical and problem-solving skills
• Ability to develop technical content for website updates, whitepapers, and blog posts
• Ability to develop and maintain strong relationships with team members and clients
• Familiarity with commonly used network architecture, network devices/services, development platforms, and software suites
• Comfortable supporting fast-paced team environments
• Familiarity with penetration testing in cloud environments encompassing a variety of technology stacks