Penetration Specialist

Location: Washington, DC
Date Posted: 04-05-2018
Lunarline is looking for an experienced Penetration Tester to perform scans on 4,000 host devices. The Penetration Tester program is composed of annual, monthly, periodic, and ongoing scans.
 
Duties and Responsibilities:
  • Coordinate with approximately 500 unique program office's IT staff to schedule and pre­pare for reoccurring security scans of assets physically located at the IDCs.
  • Prepare a Residual Risk Reports(R3) for the Program Office for all systems sched­uled to receive an R3 per the government provided schedule using the government provided R3 generation script.
  • Create draft R3 notification messages for release by the government personnel.
  • Provide Basic Risk Reports via email to all IDC system owners for all systems scanned during that month.
  • Review the status of all recurring scans to ensure that the scans completed and were per­formed using valid credentials.
  • Perform a scan of all servers to look specifically for threats identified that may pose an unacceptable risk to the client.
  • Notify individual system owners that are found to be vulnerable to the threat and person credentialed scan of the vulnerable system and provide an out of cycle Basic Risk Report and R3 to the system owner, if requested.
  • Schedule the scan at the requested time and provide a Basic Risk Report to the requestor during ad-hoc hours, if requested.
  • Perform an out­of-cycle scan and provide a Basic Risk Report to the client, if requested.
  • Maintain a record of systems, scans completed, and reports sent in the government provided SQL database.
  • Perform remediation scans and provide Basic Risk Reports.
 
Skills/Qualifications:
  • Experience in the use Tenable Security Center Continuous View (Nessus).
  • Experience with MS Windows and Linux patching and sys­tem administration.
  • Experience in MS Windows patching and system administration.
  • Experience in Linux patching and system administration.
  • Knowledge of PowerShell scripting in automating routine tasks.
  • Experience with PowerShell scripting (different person than the other spe­cialists).
  • knowledge of report writing through Microsoft SQL Server Reporting Services in creating required and ad-hoc reports.
 
Minimum Education and Certifications
  • Bachelor’s Degree preferred
  • The following certifications (more than one is preferred): Lunarline, Inc. School of Cybersecurity “Certified Expert” certifications.


Place of Performance:
  • On client site in Washington, DC

_____________________________________________________________________________________

Disclaimer
  
Lunarline is an equal opportunity employer. It is the policy of Lunarline that all employees and applicants for employment will be treated in all respects on the basis of their merit and qualifications and without regard to their race, color, national origin, age, disability, sexual orientation, religion, gender, military status, marital status or ancestry.
Lunarline participates in the E-Verify program. Therefore, any employment with Lunarline will also be contingent upon confirmation from the Social Security Administration ("SSA") and/or the Department of Homeland Security ("DHS") of your authorization to work in the United States. 
The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed.
or
this job portal is powered by CATS