Project Manager - Penetration Testing
Posted on Nov 5, 2020 by NikSoft
NikSoft is currently conducting a search for a Project Manager to lead the penetration test efforts of our federal clients cyber security team. The successful candidate will experience an unparalleled large-scale enterprise environment with over 800 Information Technology systems, supporting billions of dollars in annual revenue, supporting a diverse user base spread across the entire US. Join the NikSoft team to scale up your career to the next level.
Manage action items, working to resolve issues and identifying program risks.
Identify, schedule, and track progress and reporting tasking.
Support the mission of the CyberSecurity Risk Management by organizing and preparing for senior level meetings, provide direction to team on activities of the week, support team in preparing timely deliverable and tracking action items.
Providing input to and develop, write, edit and submit documentation in support of the program deliverables.
This candidate must be able to clearly define tasking, communicate topics to leadership through concise and succinct presentations, to organize meeting preparation materials.
Work closely with the program team and program/project managers as well as interfacing with CISO and CIO stakeholders as needed.
Must be able to work independently in a fast-paced, large-scale environment.
The successful candidate will be familiar with both automated tools and manual techniques to test the security controls deployed at various points within Agencys information systems and networks.
Lead a team of Penetration testers performing in-depth testing, which may include exploitation of Agencys assets in order to determine the resiliency and permeability of Agencys networks and IT systems.
Support security testing of web applications, client/server applications, web services, APIs, operating systems, databases, and network fabric devices (ie switches, routers, firewalls, load balancers, WAPs, etc.).
Ensure current penetration testing tools are sufficient to the task of conducting penetration testing for Agency and regularly look for and recommend additional software that which may fill gaps in Agencys current security testing toolset.
Bachelors degree in Computer Science or a related IT field.
5+ years of relevant experience in software development, cyber security, and/or testing domains.
2+ years of relevant project management and team lead experience.
2+ years of penetration testing experience in a large-scale enterprise environment.
Must have understanding of the OWASP Top Ten weaknesses, and the OWASP (or similar) web application testing frameworks.
Solid understanding of information security engineering, architecture, and application security principals.
Familiar with multiple offensive tools/technologies to include: Metasploit, Cobalt Strike, Core Impact, Burp Suite, SDR, Wireless, Intercepting Proxies, etc.
Solid foundation in formal penetration testing, ethical hacking of Embedded systems, web applications and complex networked system
Strong knowledge of cyber security, information security and knowledge of network components is desired.
Must have strong communication skills, both oral and written, with excellent interpersonal, team and organization skills.
Must have strong knowledge of MS Office products to include PowerPoint, Word, Excel, and Outlook.
Experience in all aspects of program/project management including status (action items, tasks, etc.) tracking and management, risks/issues management.
Experience working in an Agile and DevOps environment.
*Candidates must be able to obtain a Postal Sensitive Clearance (US Citizenship or Green Card required). Additionally, candidates must not have traveled outside of the USA for a combined period exceeding 6 months within the last 5 years.*