Find Jobs
Find Jobs Near You – Available Work in Your Location
ISSO
Career Insights for Vulnerability Analyst / Penetration Tester
See where this job fits in the broader career landscape. Knowing your career path helps you see what's possible from here.
Scorecard
Based on California data
Review key factors to help you decide if this role fits your goals. How is this calculated?
What they do
A Vulnerability Analyst or Penetration Tester probes for and exploits security vulnerabilities in web-based applications, networks and systems. Penetration Tests are designed to achieve a specific, attacker-simulated goal and should be requested by customers who are already at their desired security posture. A typical goal could be to access the contents of the prized customer database on the internal network, or to modify a record in an HR system. Vulnerability Assessments are designed to yield a prioritized list of vulnerabilities and are generally for clients who already understand they are not where they want to be in terms of security. The customer already knows they have issues and simply need help identifying and prioritizing them.
$125,034 / year median in California
+2% projected growth
Job Description
Responsibilities:
Conduct periodic reviews of Information Systems to ensure ongoing compliance with the security authorization package. Coordinate with systems administrators to perform system scans for Assessment and Authorization (A&A) purposes and continuous monitoring, including network devices, servers, databases, and web services. Conduct compliance audits, participate in incident handling, and lead or assist in investigations into security anomalies. Review audit logs and utilize continuous monitoring tools to identify and respond to anomalies, hacking attempts, or insider threats.Requirements:
Education:
Bachelor's degree (BA/BS) or equivalent work experience on Department of Defense (DoD) projects. 3 years of experience in cybersecurity, specifically in a DoD environment. An active Top Secret/Sensitive Compartmented Information (TS/SCI) clearance is required to start.Bonus Points:
2+ years of experience with one or more of the following:ICD-503, JSIG, RMF, NIST, FIPS, CNSSI
1253, Nessus, A&A. Demonstrated on-the-job knowledge and experience with reviewing security concepts of operations, systems security plans, security control assessments, contingency plans, configuration management plans, incident response plans, vulnerability scanning, and/or vulnerability management plans. At Zachary Piper Solutions, we offer competitive compensation and a comprehensive benefits package.Our benefits include:
Competitive salary ($100,000 - $130,000) Health, dental, and vision insurance 401k plan Paid time off and holidays Professional development and training opportunities To apply, please send your qualified resume to Geoffrey Wei at gwei@zacharypiper.com . We appreciate your interest in this position and will contact qualified candidates for further evaluation.Benefits
- Paid Time Off (PTO)
- 401(k) Plans
- Professional Development
- Health Insurance