Exploitation Analyst/Penetration Tester

Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission. Originally founded as a Veteran-owned company, we remain deeply committed to supporting veterans and proudly serving customers across the Federal Government and private sector. We have an opening for a full-time, permanent Exploitation Analyst/Penetration Tester to join our talented, dynamic team. As a Penetration Tester, you will play a crucial role in proactively discovering vulnerabilities in systems and on the Department of Veterans Affairs networks. Your primary focus is completing time-based penetration tests to support the Authority to Operate (ATO) approval process for System Owners. Veterans are encouraged to apply. Duties Perform penetration testing against various systems, which may include web applications, databases, web services, network devices, operating systems, cloud installations, and infrastructure (hardware) devices. Utilize a variety of industry standard security tools to conduct manual-based security assessments. Utilize a variety of industry standard security tools to conduct automated scans against systems. Review new vulnerabilities as they are published and develop impact assessments. Determine risk from vulnerabilities based on availability of exploit and potential loss of information and IT services capabilities. Produce periodic trending and impact reports as required. Generate reports (automated and manual) based on results from assessments and explain in detail to customers. Develop new testing techniques and programs to support the Penetration testing team. Manage and maintain hardware and software with an ability to provide infrastructure maintenance support to attack systems. Knowledge and experience with processes and procedures relating to information gathering, threat modeling, vulnerability analysis, exploitation, post-exploitation, and reporting. May be required to work outside normal duty hours to perform assessments on certain systems. Bachelor’s degree (8 years of additional relevant experience may be substituted for education) 1-4 years of experience in IT functions like network administration, engineering, or security 1 year of experience supporting offensive cybersecurity roles

Experience with the following:

Support Windows, Unix, and Linux operating systems VMWare Kali Linux Suite Nessus Scanner (Tenable) RedHat Enterprise Linux NMAP Ability to conduct scripting in bash and PowerShell

Preferred Certifications:

OSCP PNPT Pentest+ CISSP C|EH

Maveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including:

401(k) with company contribution Dental Insurance Health Insurance Vision Insurance Life Insurance Paid Time Off

About Maveris Maveris offers exceptional, mission-focused solutions to organizations facing highly complex IT, digital, and cyber security challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Maveris brings something unique to the table, and because our team is diverse, we consistently meet our goals and exceed client expectations. If you are a highly-motivated person with a willingness to learn, we invite you to apply today to join our team! To learn more about employee benefits visit www.maveris.com. For company updates and the latest job postings check us out on LinkedIn. If you'd like to read about some of our research and projects head over to Maveris Labs. Want a more behind the scenes view? Check out our blog Maveris Insights to learn more about the team behind the solutions.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.