PenTest 1

Position Title: PenTest 1
Position Type: Full-time, On-Site
Position Location: Chantilly, VA
Clearance: Active TS/SC w/ CI Poly

Waypoint's client is seeking a Penetration Tester (PenTest) Level 1 to join their growing cybersecurity team. The PenTest Level 1 role focuses on supporting penetration testing activities, assisting senior team members in assessing vulnerabilities, and ensuring that information systems remain secure. This is an entry-level position where you will develop your skills in ethical hacking, security testing, and vulnerability management under the guidance of senior testers.

Responsibilities:

• Support penetration testing efforts by conducting assessments of information systems, networks, and applications.
• Perform vulnerability scanning and assist in evaluating the security posture of systems, identifying potential risks and weaknesses.
• Assist with conducting red team activities to simulate real-world attacks and evaluate the effectiveness of defense mechanisms.
• Work with senior testers to perform hands-on testing using penetration testing tools and techniques to identify weaknesses.
• Document security findings and provide initial analysis, helping senior team members prepare reports and recommend corrective actions.
• Familiarize yourself with penetration testing methodologies such as MITRE ATT&CK and OWASP, under supervision.
• Contribute to developing scripts for automating testing tasks (Python, Bash, etc.), learning from more experienced team members.
• Research emerging threats and tools to enhance knowledge of penetration testing strategies.
• Collaborate with team members to continuously improve testing processes and techniques.
• Develop a working understanding of various operating systems (Windows, Linux, Unix) and their security vulnerabilities.
• Work within virtualized environments (e.g., VMware, Docker) to simulate attacks and conduct controlled tests.

Requirements:

• Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or a related field OR equivalent relevant experience.
• At least 1 year of relevant experience in cybersecurity, information security, or related technical roles.
• Familiarity with network protocols (e.g., TCP/IP, HTTP, DNS) and basic knowledge of common vulnerabilities and exploits.
• Basic understanding of penetration testing tools such as Nmap, Burp Suite, Metasploit, and Wireshark.
• Desire to learn and grow in the field of penetration testing, ethical hacking, and red teaming.
• Strong problem-solving skills and attention to detail.
• Ability to communicate findings clearly and assist in the development of remediation strategies.
• Familiarity with basic scripting languages (e.g., Python, Bash) for automating tasks is a plus.
• Willingness to collaborate with team members and continuously improve security skills.

Desired Skills:

• Familiarity with virtualization technologies such as VMware, Docker, or Kubernetes.
• Basic knowledge of cloud environments (e.g., AWS, Azure).
• Some exposure to ethical hacking or security testing through coursework, certifications, or personal projects.
• Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or similar are a plus.

*Waypoint Human Capital is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender, national origin, age, protected veteran status, or disability status.