Role & seniority

Penetration Tester, Cybersecurity – Attack Surface Management (mid to senior level)

Stack/tools

Tools: Qualys, Burp Suite, Nmap, Wireshark; external web app testing

Tech: scripting (Python, Perl, Bash); MITRE ATT&CK mapping; familiarity with load balancers, proxies, VPNs, hybrid cloud; virtualization platforms; firewalls and endpoint protection

Automation: experience automating testing with scripts/programs

Top 3 responsibilities

Assess security controls and validate vulnerabilities across engagements (incident response, compliance, product assessments)
Collaborate with stakeholders to improve overall security posture and support remediation of findings
Conduct manual assessments on production systems and guide remediation; manage engagements end-to-end

Must-have skills

Proficiency with security testing tools and manual assessment of production environments
Ability to map controls to MITRE ATT&CK and communicate findings to non-technical audiences
Experience with external web applications testing and large network infrastructure components
Scripting ability (Python, Perl, Bash) and capability to automate testing tasks

Nice-to-haves

6+ years in cybersecurity, or 4+ years with a bachelor’s in a computer field, or 5+ years with an associate degree
Certifications such as OSCP, GPEN, or CompTIA PenTest

Location & work type

Remote (U.S.), Full-Time

Notes

Role posted via Lensa for BAE Systems USA; responsibilities cover broad cybe

Full Description

Lensa is a career site that helps job seekers find great jobs in the US. We are not a staffing firm or agency. Lensa does not hire directly for these jobs, but promotes jobs on LinkedIn on behalf of its direct clients, recruitment ad agencies, and marketing partners. Lensa partners with DirectEmployers to promote this job for BAE Systems USA. Clicking "Apply Now" or "Read more" on Lensa redirects you to the job board/employer site. Any information collected there is subject to their terms and privacy notice.

Job Description

BAE Systems Cybersecurity - Attack Surface Management has an opening for Penetration Tester to assess security controls and work closely with stakeholders to improve overall security posture. Position will work on a wide array of engagements, including incident response, compliance, application accreditation, assessment of new products, and general projects. This is an exciting opportunity to work with a highly motivated team of cyber security professionals.

Required Education, Experience, & Skills

Ability to use and analyze information produced from various commercial and open source tools, including Qualys, Burp Suite, Nmap, Wireshark, etc. Familiarity with modern vulnerability categories and attack techniques (XSS, CSRF, SQLi). Proficiency in one or more scripting languages (Python, Perl, Bash, etc.) Ability to map controls to the MITRE ATT&CK framework Familiarity with external web applications testing. Familiarity with large network infrastructure components (Load balancers, Proxies, hybrid cloud implementations, VPNs) Familiarity with network and host-based security system components (Firewalls, Endpoint Protection Solutions) Familiarity with modern virtualization platforms and technology. Experience conducting manual assessments on production systems (not just running vulnerability scanners). Experience automating testing efforts with written scripts or programs. Ability to communicate and interact with stakeholders effectively while managing engagements. Ability to translate complex technical information to non-technical audiences to support remediation of identified findings.

Preferred Education, Experience, & Skills

0pt;font-family:">6 years in a cybersecurity role, 5 years with an associate s degree in a computer-related field, or 4 years with a bachelor s degree in a computer-related field.
0pt;font-family:">OSCP, GPEN, CompTIA Pen Test or similar certifications.

Pay Information

Full-Time Salary Range: $130355 - $221603

Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.

Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20 hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.

Cybersecurity Penetration Tester [REMOTE JOB]

119070BR

EEO Career Site Equal Opportunity Employer. Minorities . females . veterans . individuals with disabilities . sexual orientation . gender identity . gender expression

If you have questions about this posting, please contact support@lensa.com