Job Details

Job Location

Maryland - Columbia, MD

Position Type

Full Time

Description

Key Responsibilities:

• Conduct comprehensive penetration tests on cloud-based systems, applications, and infrastructure to identify vulnerabilities and security flaws.
• Utilize a variety of tools and techniques to simulate cyber attacks on cloud environments, including AWS, Azure, and Google Cloud Platform.
• Collaborate with the security team to develop and implement effective security measures and countermeasures based on penetration test findings.
• Prepare detailed reports of penetration testing activities, including findings, impact analysis, and recommendations for mitigating identified vulnerabilities.
• Stay current with emerging security threats, technologies, and penetration testing methodologies.
• Assist in developing and refining cloud security policies, procedures, and best practices.
• Participate in security audits and compliance assessments to ensure adherence to industry standards and regulations.
• Provide guidance and support to development teams in the secure design and deployment of cloud applications and infrastructure.

Qualifications

Required Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
• Professional certifications in cybersecurity (e.g., OSCP, CEH, GWAPT, AWS/Azure/Google Cloud security certifications) are highly desirable.
• Proven experience in penetration testing, particularly in cloud environments.
• Strong understanding of cloud computing technologies and security principles, including IAM, network security, encryption, and secure coding practices.
• Proficient in using penetration testing tools and frameworks (e.g., Metasploit, Burp Suite, Kali Linux).
• Knowledge of programming and scripting languages (e.g., Python, Bash) is a plus.
• Excellent problem-solving skills and the ability to think like both an attacker and a defender.
• Strong communication skills, with the ability to present findings and recommendations effectively to technical and non-technical stakeholders.