Penetration Tester - IT Security Audit (Short Term/Remote)
Company Overview: TestPros is a successful and growing business, established in 1988 to provide Information Technology (IT) technical support services to a wide range of Commercial and U.S. Federal, State, and Local Government customers. Our capabilities include Program Management, Program Oversight, Process Audit, Intelligence Analysis, Cyber Security, NIST 800-53, NIST SP 800-171 / CMMC Consulting/Assessment/Compliance, PCI Compliance, SOC 2, GLBA, Zero Trust, Resiliency, Computer Forensics, Software Supply Chain Assurance, Software Testing, Test Automation, Section 508 and WCAG Accessibility Assessment and Remediation, Localization Testing, Independent Verification and Validation (IV&V), Quality Assurance (QA), Compliance, and Research and Development (R&D) services. TestPros is an Equal Opportunity Employer. Position: Part time (as needed, 1099 or Corp. to Corp) Job Summary: The ideal candidate will have strong hands-on experience conducting external and internal vulnerability assessments, penetration testing, and compliance-based security evaluations for government or municipal environments. This role requires the ability to perform non-disruptive testing, work within outage windows, and deliver clear, executive-level reporting. Key Responsibilities • Perform external penetration testing and vulnerability scanning across a /24 public IP space. • Conduct internal penetration testing across a /21 internal network, including multiple VLANs and network segments. • Execute an assumed-breach scenario, such as testing from a compromised workstation via VPN. • Conduct a public Wi-Fi security assessment, identifying wireless vulnerabilities and attack vectors. • Evaluate the City's current security posture against CJIS, CORA, and NIST standards. • Coordinate testing that may involve systems or IP ranges belonging to sister government agencies. • Work within designated planned outage windows to perform active testing without disrupting operations. • Document all findings, including: • What was tested • What was not tested • Identified vulnerabilities and exploitability • Severity and risk prioritization • Recommended remediation steps • Prepare a comprehensive final report and participate in review meetings if requested. Required Qualifications • OSCP or OSCE certification (either meets the requirement). • 5+ years of hands-on penetration testing and vulnerability assessment experience. • Proven experience performing both external and internal penetration tests in complex environments. • Strong understanding of: • Network segmentation • VPN-based testing • Active Directory • Cloud/SaaS environments • Firewall and IDS/IPS technologies • Experience with government, public sector, or municipal IT environments is highly preferred. • Ability to write clear, professional, and actionable technical reports. Preferred Skills • Experience with SCADA-adjacent environments (testing is not performed on SCADA, but awareness is valuable). • Familiarity with CJIS security policy requirements. • Experience coordinating with multi-agency or cross-organizational IT teams. • Expertise with common tools such as Kali Linux, Burp Suite, Nmap, Metasploit, Nessus/Tenable, and Wireshark. Engagement Details • Estimated Start: February 2026 • Estimated Duration: 6–8 weeks • Work Location: Fully Remote (VPN access provided) • Clearances: Not required, but government experience is a plus Benefits TestPros offers a competitive salary, medical/dental/vision insurance, life insurance, paid time off, paid holidays, 401(k) retirement plan with company match, opportunities for professional growth, cell phone discounts, and much more! All benefits are per TestPros current policies and are subject to change without notice. Benefits are available to full-time employees. TestPros, Inc. is an Equal Opportunity Employer. EEO Statement All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, marital status, age, national origin, or protected veteran status. Powered by JazzHR llrsXN2K6c Apply tot his job