General Dynamics Information Technology hiring Penetration Tester • Remote (Work from Home) | Himalayas
General Dynamics Information TechnologyGT

Penetration Tester

General Dynamics Information Technology (GDIT) is a premier technology and professional services company that shields the nation's interests through high-end consulting, advanced technology solutions, and mission services.

General Dynamics Information Technology

Employee count: 1001-5000

Salary: 111k-132k USD

United States only

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Other

Clearance Level Must Be Able to Obtain:

None

Public Trust/Other Required:

Other

Job Family:

Cyber Security

Job Qualifications:

Skills:

Cybersecurity, Information Security, Penetration Testing, Penetration Testing Software, Physical Penetration Testing

Certifications:

None

Experience:

5 + years of related experience

US Citizenship Required:

Yes

Job Description:

GDIT is seeking a Penetration Tester to join our CDC team. The successful candidate will perform vulnerability assessments and penetration testing following the customers prescribed scope statement with authorities derived from the CDC’s Enterprise cyber security organization.

The Pen-Tester is responsible for protecting the company from dynamic and evolving threats. Monitors and research emerging and advanced information security threats, as well as investigating repeating trends, attacks, malicious intellectual properties, and other abnormalities. Minimizes data exposure risks by meeting all company and regulatory requirements while developing and implementing business solutions. Providing incident response solutions to ever growing threats in the cyber world.

This role is fully remote!

Please Note: This role requires an ACTIVE Public Trust

Schedule:

  • This will be an 80-hour bi-weekly schedule from 8a-5p

  • You will work within a team to provide support to a 24x7x365 Operation, including Federal Holidays.

Responsibilities:

  • Scope, develop, execute vulnerability assessments and secure configuration assessments using tools such as Burp Suite, Nmap, Metasploit and Kali Linux in order to perform the following types of testing (not all-inclusive):

    • Network Penetration Testing - Web Application Penetration Testing - Mobile Application Penetration Testing - Red Team Simulation - Cloud Based Target Penetration Testing.

  • Assess NIST 800-53 Rev 4 (and later versions) controls to ensure they are implemented corrected and operating as intended

  • Coordinate with the pen testing vendor(s) for system assessments in order to scope the testing.

  • Perform ST&Es.

  • Work with other branches within CSPO for internal “Red Team” tests on systems and system controls

  • Document identified vulnerabilities, how they were discovered and how they can be reproduced.

  • Analyze findings from vulnerability assessment output to determine if false positives exist and document/justify why the finding is a false positive

  • Submit, review, process, analyze, follow-up on and make recommendations regarding data related to the status of Plan of Action and Milestones (POA&M), which is the documented plan to mitigate a weakness, item mitigation

  • Draft reports and other correspondence related to security reviews, audits, POA&Ms Plan of Action and Milestones (POA&M) tracking and related compliance issues.

  • review vulnerabilities and analyze if any false positives exist and document any false positives with justification as to why they are not legitimate and provide validation artifacts.

  • Shall conduct Risk and Vulnerability Assessments (RVA) within the "Operator Role" in support of the CDC mission which includes the following:

    • Vulnerability Scanning and Testing to conduct vulnerability assessments.

    • Penetration Testing, which exploits weaknesses or tests responses from systems, applications, networks, and security controls.

    • Social Engineering (Phishing), which uses e-mails: (a) as attack vectors or (b) as a means to test security awareness.

    • Wireless Discovery and Identification, which identifies wireless signals, rogue wireless devices, and exploits access points.

    • Web Application Scanning and Testing, which identifies web application vulnerabilities.

    • Database Scanning, which performs a security scan of database settings and controls.

    • Operating System Scanning, which scans operating systems to do compliance checks.

  • Conduct following task within the following methodologies:

    • Pre-Rules of Engagement (ROE): Agency contacted, briefed on CISA Assessment Team services, requested, confirmed, and ROE signed.

    • Pre-Assessment: Package distributed/received, teleconference, receive artifacts.

    • Assessment: On- and off-site assessment activities.

    • Reporting: Draft report submitted, receive comments.

    • Post Assessment: Final report delivered and out brief.

Required Experience:

  • Bachelors and 5+ years of relevant experience (or equivalent education/experience)

  • 5+ years of Penetration Testing

  • Key industry certifications such as CompTIA PenTest+, C|PENT, C|EH Master, GIAC

  • An active Public Trust is required

Desired Experience:

  • Previous CDC experience preferred

  • Ability to work well with a remote team

The likely salary range for this position is $110,614 - $132,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:

40

Travel Required:

Less than 10%

Telecommuting Options:

Remote

Work Location:

Any Location / Remote

Additional Work Locations:

Total Rewards at GDIT:

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. GDIT typically provides new employees with 15 days of paid leave per calendar year to be used for vacations, personal business, and illness and an additional 10 paid holidays per year. Paid leave and paid holidays are prorated based on the employee’s date of hire. The GDIT Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12 month period for eligible employees. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.Join our Talent Community to stay up to date on our career opportunities and events at

gdit.com/tc.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

About the job

Apply before

Posted on

Job type

Full Time

Experience level

Mid-level

Salary

Salary: 111k-132k USD

Location requirements

Hiring timezones

United States +/- 0 hours

About General Dynamics Information Technology

Learn more about General Dynamics Information Technology and their company culture.

View company profile

General Dynamics Information Technology (GDIT) is a premier technology and professional services company that shields the nation's interests through high-end consulting, advanced technology solutions, and mission services. Established to address complex government, defense, and intelligence projects, GDIT leverages innovative technology to enhance operational effectiveness and responsiveness. With over 30,000 employees, GDIT works with clients across various sectors, including the federal government, intelligence community, and military agencies, ensuring security, advanced intelligence methodologies, and robust technology infrastructure.

GDIT has built a reputation for its commitment to delivering reliable, cutting-edge solutions that meet critical mission requirements. The organization's philosophy revolves around solving real-world problems through technology, applying expertise in areas such as artificial intelligence, cloud computing, cybersecurity, and data analytics. GDIT prioritizes innovation and collaboration, assembling cross-functional teams dedicated to driving success across numerous significant projects that not only safeguard the nation but also enhance its strategic capabilities. With a steadfast dedication to excellence, GDIT embraces the challenges of the future, ensuring that its clients remain at the forefront of technological advancements and operational readiness.

Claim this profileGeneral Dynamics Information Technology logoGT

General Dynamics Information Technology

View company profile

Similar remote jobs

Here are other jobs you might want to apply for.

View all remote jobs

14 remote jobs at General Dynamics Information Technology

Explore the variety of open remote roles at General Dynamics Information Technology, offering flexible work options across multiple disciplines and skill levels.

View all jobs at General Dynamics Information Technology

Remote companies like General Dynamics Information Technology

Find your next opportunity by exploring profiles of companies that are similar to General Dynamics Information Technology. Compare culture, benefits, and job openings on Himalayas.

View all companies

Find your dream job

Sign up now and join over 100,000 remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan