[Remote] Security/Penetration Tester

Note: The job is a remote job and is open to candidates in USA. CVP is an award-winning healthcare and next-gen technology consulting firm recognized for excellence and innovation. They are seeking a Penetration Tester to secure critical networks and systems by conducting vulnerability assessments, penetration testing, and providing insights into security improvements. Responsibilities • Analyze security policies that identify procedures and rules for accessing and using IT resources for effectiveness, make suggestions on security policy improvements, and work to enhance methodology material • Apply programming language structures (e.g., source code review) and logic • Conduct and/or support authorized penetration testing on enterprise network assets • Conduct application vulnerability assessments • Conduct vulnerability scans and recognize vulnerabilities in security systems • Conduct analysis of log files, evidence, and other information to determine best methods for conducting vulnerability assessments and penetration tests • Design tests and tools to try to break into security-protected applications and networks to probe for vulnerabilities • Develop insights about the context of an organization’s threat environment • Follow industry best practices and methodologies, including the Open Web Application Security Project (OWASP) Testing Guide, to perform penetration testing services to uncover vulnerabilities across various systems and applications across the network • Identify systemic security issues based on the analysis of vulnerability and configuration data • Maintain knowledge of the latest methods for ethical hacking and testing and always evaluating new penetration testing tools • Mimic threat behaviors • Perform impact/risk assessments • Document findings, write security reports, discuss solutions with IT teams and management, and provide feedback and verification after security fixes are issued • Research new threats, attack vectors, and risk • Review logs to identify evidence of past intrusions • Share meaningful insights about the context of an organization’s threat environment that improve its risk management posture • Test system and applications using a manual in-depth testing methodologies and tools (e.g. Burp Suite Pro, ZAP Proxy, IronWASP, etc...) • Test systems and applications using automated tools and manual methods (e.g. CoreImpact, Kali Linux, Nessus, NMap, etc...) • Maintain appropriate technical and procedural documentation • Build and maintain client and stakeholder relationships • Complete projects, tasks, and associated deliverables on time and with quality Skills • 4-year college degree in Computer Science or related field and 0 - 2 years' experience or 5 years' experience in lieu of a college degree • Excellent communication skills, both written and oral • Ability to learn and work independently • Certified Ethical Hacker • System Admin experience • Understanding of DevSecOps process and tools • ISSO experience Company Overview • CVP is an award-winning healthcare and next-gen technology firm that helps organizations achieve lasting transformation and build a healthier, safer, brighter future. It was founded in 2002, and is headquartered in Fairfax, Virginia, USA, with a workforce of 501-1000 employees. Its website is Company H1B Sponsorship • CVP (Customer Value Partners) has a track record of offering H1B sponsorships, with 1 in 2025, 1 in 2023, 2 in 2022, 2 in 2021, 2 in 2020. Please note that this does not guarantee sponsorship for this specific role. Apply tot his job