Penetration Tester

This role involves performing blind and intelligent penetration testing against internet-facing assets, including web applications and remote access systems, for all 47 County departments. The position focuses on obtaining confidential and sensitive data using real-world threat intelligence-based techniques while evading detection. The role requires conducting external network and web application penetration testing and vulnerability assessments per NIST SP 800-115 methodology. The ideal candidate will document all findings with risk ratings, evidence, and remediation recommendations for the Assessment report.