Mid-Level Penetration Tester
New
D
Dragonfli GroupCybersecurity
United StatesFull-TimeMiddle
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 5 to 8 years
Requirements
- Approximately 5 to 8 years of experience conducting or leading penetration testing engagements.
- Demonstrated ability to plan and execute assessments across network, endpoint, wireless, database, application, and infrastructure environments.
- Experience developing Rules of Engagement, Execution Plans, and formal, decision-ready reporting for stakeholders.
- Experience coordinating directly with system owners and SOC personnel on scope, safety thresholds, and stop/pause procedures.
- Ability to work fully remote with reliable, secure connectivity.
- Previous federal contracting experience is preferred.
- Experience with CISA WAS, CISA FAST, and KEV validation and retest workflows is preferred.
- Familiarity with MITRE ATT&CK and ATLAS mapping is preferred.
- Advanced certifications such as OSCP, OSCE, GPEN, or GXPN are preferred.
- Experience integrating AI-enabled tools into testing workflows while maintaining human oversight is preferred.
Responsibilities
- Plan and execute authorized penetration tests across network, endpoint, wireless, database, application, and infrastructure environments using structured Planning, Discovery, Testing, and Reporting phases.
- Develop and tailor Rules of Engagement, Execution Plans, daily status updates, and final reporting inputs for assigned assessments.
- Coordinate with system owners, SOC personnel, and other stakeholders to confirm scope, test windows, prerequisites, safety thresholds, and stop/pause procedures.
- Validate vulnerabilities arising from misconfigurations, outdated software, weak access controls, incomplete control implementation, and exploitable attack paths.
- Support validation of CISA WAS, CISA FAST, KEV exposure, and external-facing asset findings, and coordinate retesting to confirm closure.
- Use approved automated and AI-enabled tools to improve reconnaissance, testing efficiency, ATT&CK/ATLAS mapping, evidence development, and reporting while maintaining human oversight.
View Full Description & ApplyYou'll be redirected to the employer's site
