"Alerted.org

Job Description

Led and executed penetration testing engagements across diverse environments including computer systems, cloud platforms, networks, and web applications. Conducted software assurance assessments and vulnerability scans using both automated tools and manual techniques.

Identified and exploited security weaknesses, documented technical findings, and provided clear, actionable remediation guidance to reduce risk and enhance cyber resilience.

Analyzed root causes of common vulnerabilities such as buffer overflows, SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), race conditions (TOCTOU), XML External Entity (XXE) attacks, encryption flaws, and authentication bypasses.

Applied cybersecurity defense mechanisms including encryption, access controls, and identity management to mitigate risks, especially those arising from supply chain and third-party integrations.

Leveraged frameworks such as NIST SP 800-53 and MITRE ATT&CK to support threat modeling, inform cloud security architecture decisions, and strengthen security posture across both test and production environments.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [email protected] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

Bachelor’s degree in Information Technology, Computer Science, Business, or a related field required; Master’s degree preferred.

Over 10 years of technical experience, including at least 2 years of recent, hands-on work in:

Software assurance

Penetration testing using automated tools

Security patch management

Secure cloud and hybrid engineering

Cross Domain Solution (CDS) systems

Holds active Certified Ethical Hacker (CEH) and CISSP certifications, or equivalent demonstrable expertise in offensive security and cyber defense.

OSCP (Offensive Security Certified Professional) certification strongly preferred, reflecting advanced skills in exploitation techniques and adversary simulation.

Proven experience in cloud environments such as AWS and Azure, and Linux-based systems including RHEL and other general distributions.

Proficient in vulnerability scanning using Tenable tools and skilled in offensive security toolsets such as Kali Linux, Burp Suite Pro, and Metasploit for red team assessments, application testing, and exploit development.