Penetration Tester

🕒 July 31

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Fortreum

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2020

💼 Consulting

🏥 Healthcare

🎖️ Defense

Consulting • Healthcare • Defense

Fortreum is a cybersecurity and compliance services firm that helps cloud service providers, government contractors, and enterprises navigate regulatory frameworks and secure regulated workloads. The company provides assessments, roadmaps, and advisory services for FedRAMP, CMMC/NIST SP 800-171, DoD Cloud, FISMA, HIPAA, SOC, PCI, ISO 27001 and related frameworks, and offers a continuous assurance framework called XRAMP along with executive cyber hygiene offerings. Fortreum focuses on reducing audit overhead, aligning security programs to long-term strategies, and supporting organizations pursuing public sector and regulated-industry certifications.

📋 Description

• Conduct network, application (API, mobile, and web), and Social Engineering penetration testing • Work closely with all members of the team to conduct penetration testing of customer networks, applications (API, web, and mobile), and/or social engineering activities to achieve the customer’s objectives of the engagement • Advise customers on details of vulnerabilities, remediation strategies, and compliance requirements • Prepare final deliverables for delivery to customers within established timelines • Establish and maintain positive relationships with customers and stakeholders • Coordinate project readiness with internal teams and customers • Pursue continuous professional development by achieving industry specific certifications (must be willing to meet FedRAMP certification requirements as outlined by A2LA) • Perform project readouts with customers to notify them of the outcome of their penetration test • Train and mentor junior team members • Interface with customers and other internal delivery team members throughout entire engagement

🎯 Requirements

• Bachelor’s Degree or 4 years of equivalent job experience • 2+ years of professional services experience • 3+ years of web application and network penetration testing experience • Proficient in at least one or more scripting languages (i.e., bash, python, PowerShell, ruby, etc.) • Strong technical acumen with regards to penetration testing methodologies • Familiarity with best practices frameworks such as OWASP, MITRE ATT&CK, OSSTMM, and/or PTES • eCPPT, OSCP, OSCE, OSWE, or GPEN certifications preferred

🏖️ Benefits

• medical insurance • dental insurance • vision insurance • 401K plan with a 4% match • company paid short-term disability • company paid long-term disability • company paid AD&D and life insurance • flex time off • annual bonuses • training stipends • certification reimbursements • access to over 30,000 free online training courses • personal cell phone allowance • new hire and annual home office stipend • spot awards • eleven paid holidays