Red Team Penetration Test Lead

6 days ago

Apply Now

Receive Emails with Similar Jobs

ZEN STRATEGICS LLC

WebsiteLinkedInAll Job Openings

Cybersecurity • Cloud strategy • Controlled Unclassified Information (CUI) • Records Management (M-19-21) • Digitization

2 - 10 employees

🔒 Cybersecurity

🏛️ Government

Description

• The Red Team Penetration Test Lead is responsible for execution and delivery of all tasks assigned to the Red Team Penetration Test Team. • Reporting to Director of Architecture, Compliance, and Engineering for Zen Strategics. • Establish, update or modify, and maintain all Red Team and penetration testing plans and procedures. • Coordinate, with all stakeholders, all actions associated with the penetration test lifecycle. • Continually develop, maintain, and optimize all program documentation related to Penetration Testing based upon innovation, industry techniques, policies, laws, and regulations. • Documentation includes, but is not limited to Concept of Operations, Guidelines, and Standard Operating Procedures. • Maintain a centralized information portal for tracking penetration testing projects and Red Team activities. • Conduct penetration tests per the approved operating procedures and rules of engagement. • Analyze, map potential vulnerabilities, mapped, provide analysis artifacts and reports for all penetration tests. • Provide vulnerability list to the appropriate organization for subsequent tracking and Plan of Action and Milestones (POA&M) creation. • Develop and follow a testing schedule that includes flexibility to conduct ad hoc tests upon request. • Brief staff, leadership, and other stakeholders the results of penetration testing activities. • Identify security deficiencies and determine the efficacy of security controls design and implementation. • Provide advisement on countermeasures to mitigate threats.

Requirements

• Bachelor’s degree or higher computer science or related field • Minimum of seven (7) years’ experience as senior subject matter expert in cybersecurity. • Minimum of five (5) years’ experience as a task lead. • Seven (7) years of experience conducting Red Team exercises and/or Penetration Testing. • Expert knowledge of potential technical, physical, and social vulnerabilities and the exploiting of target assets. • General knowledge of a pen test standards, especially DHS standards such as RVA and HAC SIN standards, guidelines, and procedures. • Highly familiar of industry risk management and/or cybersecurity standards NIST SP 800-37, SP 800- 137, SP 800-128, OMB M-21-31, EO 14028, and DISA STIG