Cyber Penetration Tester Senior

BTVK Advisory is a leading advisory firm whose specialized professionals guide clients through an ever-changing business world helping them win now and anticipate tomorrow. BTVK Advisory and its affiliated entities have operations in North America South America Europe Asia and Australia. BTVK Advisorys ultimate parent entity Baker Tilly US LLP is an independent member of Baker Tilly International a worldwide network of independent accounting and business advisory firms in 141 territories with 43000 professionals and a combined worldwide revenue of $5.2 billion.

Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race color religion sex national origin disability or protected veteran status gender identity sexual orientation or any other legally protected basis in accordance with applicable federal state or local law.

To be added to all ET through Experienced requisitions Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group LP employee e-mail accounts are considered property of Baker Tilly Advisory Group LP and are not subject to payment of agency order to be an authorized recruitment agency (search firm) for Baker Tilly Advisory Group LP there must be a formal written agreement in place and the agency must be invited by Baker Tillys Talent Attraction team to submit candidates for review via our applicant tracking system.

Responsibilities:

• Network penetration testing with tools such as Nessus Nmap Metasploit.
• Web application testing including advanced usage of Burp Suite Pro.
• TCP/IP networking and ability to troubleshoot connectivity issues.
• Test clients web and/or mobile applications and APIs to expose security weaknesses being responsible for test quality and resolution of issues that may impede the test effort for large or complex projects.
• Continuous learning by staying up to date on current testing tools and their applicability to a particular environment.
• Produce penetration testing reports based on testing results.
• Collaborate with program team members to ensure testing runs smoothly.
• Communicate effectively with the penetration testing team.

Qualifications:

• Bachelors degree in business administration cybersecurity information technology computer science or other related field or equivalent experience
• 2 years of experience with TCP/IP networking and attacking endpoints at a network level.
• 2 years of experience with vulnerability scanning and Penetration Testing
• 2 years of experience in an internal or external cybersecurity role or similar (e.g. threat/penetration testing ethical hacking OWASP top 10 AppScan)
• Collaborative and able to effectively communicate with a team.
• Desired Certifications: Offensive Security Certified Professional (OSCP) GPEN: GIAC Certified Penetration Tester OffSec Web Assessor (OSWA) OffSec Web Expert (OSWE) API Security Certified Professional (ASCP) Certified API Security Analyst (CASA)
• Working knowledge of tools such as Burp Suite Nessus and the Kali Linux environment
• Experience with cloud penetration testing including K8S AWS and Azure
• Testing web applications APIs mobile applications physical security and social engineering (not all required but multiple are expected)
• Experience with Dradis a plus and knowledge of vulnerabilities and exploits.