Junior Penetration Tester

Black Lantern Security is a Services Oriented Company • Black Lantern Security is built around the ingenuity, passion, and determination of our Operators and Analysts • No one "mastermind" • No "cult of personality" • Competitive compensation and benefits • Healthy work-life balance • Project-based engagements that play to the team's strengths Junior Penetration Tester Location:Remote Required: • Technical Cybersecurity experience. • Experience in penetration testing, computer network attack (CNA), and/or computer network defense (CND).• Experience with basic scripting languages including bash and/or PowerShell. • Experience with at least one object-oriented programming language (Python, Ruby, Java, etc.). • Must be US citizen (must be willing to submit to federal, state, and local background checks and other requirements). • Knowledge of Windows, Unix, TCP/IP, IDS/IPS, and web content filtering. • Demonstrated ability to: • Adhere to the highest standards of honesty and scientific and business integrity. • Think critically about complex problems and situations.• Consider emerging vulnerabilities and threats from within the context of organizational risk and business impact(s). • Develop novel attack vectors based on newly discovered vulnerabilities. • Develop home-grown software solutions and utilities for computer network attack (CNA) and computer network defense (CND). • Apply industry standards and best practices including the Penetration Testing Execution Standard (PTES) and the Mitre Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) Framework.• Go beyond automated and “push-button” attack tools and utilities. • Possess a basic understanding of regulatory standards and requirements including the Health Insurance Portability and Accountability Act (HIPAA), Payment Card Industry Data Security Standard (PCI-DSS), and the Gramm-Leach-Bliley Act (GLBA). Responsibilities: • Project-Based • Help develop and deliver test strategies for attacking and assessing complex and distributed systems. • Provide representative tactics, techniques, and procedures (TTPs) for opportunistic, advanced, and sophisticated attackers according to customer goals and objectives.• Prepare clear and concise situation reports and activity summaries for BLS customers and senior leadership. • Execute verification and validation testing for customer mitigations and fixes. • Develop and deliver walkthrough(s), proof(s) of concept (PoCs), articles, and formal presentations. • Research and Development (R&D) • Attend and/or present at professional conferences and events. • Conduct independent research for: • The development of novel attack methods. • Discovering new and/or undisclosed vulnerabilities.Apply tot his job