Senior Penetration Tester
Full-time
United States – Must Work East Coast Hours
Primary Purpose and Goal of Role
Quzara is looking for a highly experienced and skilled Senior Penetration Tester with specific expertise in Microsoft 365 and Azure Security. The ideal candidate must be able to perform advanced security testing on wired and wireless networks, web-based applications, and computer systems using penetration testing tools, as well as lead and mentor a team of penetration testers. They should have extensive experience with the latest methods and tools for ethical hacking and have a track record of performing penetration tests. Additional responsibilities include performing security audits, analyzing security policies and procedures, and writing comprehensive security assessment reports.
Responsibilities
- Plan, create, and execute advanced penetration methods, scripts, and tests for the team, with a focus on Microsoft 365 and Azure Security
- Assess and test the security of Microsoft 365 environments, including Exchange Online, SharePoint Online, and Teams
- Conduct penetration testing and vulnerability assessments on Azure cloud infrastructure and applications
- Lead and mentor a team of penetration testers, providing guidance and sharing expertise
- Carry out remote and on-site testing of client networks and infrastructure to expose security weaknesses
- Simulate security breaches to assess a system's relative security
- Create detailed reports and recommendations based on findings, including uncovered security issues and associated risk levels
- Present findings, risk assessments, and conclusions to management and other relevant parties
- Maintain advanced knowledge of networking, cryptography, reverse engineering, web applications, operating systems, databases, and wireless technologies
- Possess expertise in various scripting and programming languages, including Python, SQL, C/C++, JavaScript, PHP, Java, and Ruby
- Provide strong written and oral communication skills to effectively convey assessment results and potential weaknesses
Requirements
- Bachelor's degree and at least 10 years of experience in cybersecurity. Additional years of relevant experience may be considered in lieu of Bachelor's degree.
- 7 years minimum of work experience directly related to Red Team assessments, penetration testing (intranet, internet, web, wireless, social engineering), with a focus on Microsoft 365 and Azure Security
- One or more of the following certifications: OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, MS-500 (Microsoft 365 Security Administration), AZ-500 (Azure Security Technologies)
- Expertise with scripting languages (e.g., Python, PowerShell, Java, Perl, etc)
- Proficiency with penetration testing tools (Kali Linux, Binwalk, Burp, etc)
- Experience acting as a Subject Matter Expert or team lead, providing guidance to others
- Proven track record of reviewing cybersecurity vulnerabilities for risk and relevance
- Experience in planning mitigations for systems vulnerabilities/li>
- Ability to obtain federal security clearance is desirable
- Exceptional communication skills; able to successfully communicate with management personnel, technical personnel, and third parties
Quzara LLC is an Equal Employment/Affirmative Action employer. We do not discriminate in hiring based on sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected Veteran status, or any other characteristic protected by federal, state, or local law.