Virginia DMV
Join to apply for the
Security & Penetration Tester
role at
Virginia Department Of Motor Vehicles Virginia Department Of Motor Vehicles provided pay range
This range is provided by Virginia Department Of Motor Vehicles. Your actual pay will be based on your skills and experience talk with your recruiter to learn more. Base pay range
$104,720.00/yr - $120,428.00/yr The Virginia Department of Motor Vehicles is hiring for a Security & Penetration Tester for a position with its Information Security and Risk Management administration in Richmond, VA. The Security & Penetration Tester is responsible for overseeing and executing the agencys security testing program, with a focus on assessing the security of new and existing applications, systems, and technologies. This role plans, directs and performs penetration testing, vulnerability assessments, and red team exercises to assess and identify security vulnerabilities of networks, applications and systems. It establishes documents testing methodologies and standards, ensures compliance with organizational and regulatory security requirements, and collaborates with internal and external stakeholders to validate and track remediation efforts; evaluates findings and performs root cause analysis to identify weaknesses, misconfiguration, or other flaws in the environment that could lead to security compromises. It documents testing results and presents suggestions for the development of countermeasures, security improvements, and mitigation strategies. Utilizes a variety of assessment tools, such as Nmap, BurpSuite, Kali Linux and scripting languages like Bash, Python, Perl, or Ruby. Familiar with red team testing protocols and cybersecurity frameworks like OWASP, OSSTMM and PTES. Stays up to date with the latest security threats, techniques, and tools to continuously improve penetration testing methodologies. In addition to providing technical expertise, this position communicates risk posture to management, advises on secure design, development, and mitigation strategies, and mentors staff to strengthen the agencys overall security capabilities. The Virginia Department of Motor Vehicles (DMV), headquartered in Richmond, Virginia, serves approximately 6.2 million licensed drivers and ID card holders with over 8.4 million registered vehicles. In addition, DMV serves a wide array of businesses, including dealers, fuels tax customers, rental companies, driving schools, other state agencies, local governments, and non-profit organizations. DMV operates upon five fundamental core values: Trustworthiness, Respect, Accountability, Integrity, and Teamwork (TRAIT). We dont just talk about our core values, we live them! Minimum Qualifications Extensive experience with hands?on penetration testing and vulnerability assessment. Proven background in using testing tools, conducting network, application and cloud penetration tests, manual testing and exploitation. Experience in secure code review and static/dynamic application security testing, Red Teaming or adversary emulation exercises. Experience leading testing projects, writing reports for executives and coordinating remediation with technical staff.
Additional Considerations
Preferred possession of, or documented course enrollment with an endorsed application for, certification for CEH, OSCP, OSWE, OSEP, OSED, GPEN and/or GWAPT.
#J-18808-Ljbffr
Security & Penetration Tester
role at
Virginia Department Of Motor Vehicles Virginia Department Of Motor Vehicles provided pay range
This range is provided by Virginia Department Of Motor Vehicles. Your actual pay will be based on your skills and experience talk with your recruiter to learn more. Base pay range
$104,720.00/yr - $120,428.00/yr The Virginia Department of Motor Vehicles is hiring for a Security & Penetration Tester for a position with its Information Security and Risk Management administration in Richmond, VA. The Security & Penetration Tester is responsible for overseeing and executing the agencys security testing program, with a focus on assessing the security of new and existing applications, systems, and technologies. This role plans, directs and performs penetration testing, vulnerability assessments, and red team exercises to assess and identify security vulnerabilities of networks, applications and systems. It establishes documents testing methodologies and standards, ensures compliance with organizational and regulatory security requirements, and collaborates with internal and external stakeholders to validate and track remediation efforts; evaluates findings and performs root cause analysis to identify weaknesses, misconfiguration, or other flaws in the environment that could lead to security compromises. It documents testing results and presents suggestions for the development of countermeasures, security improvements, and mitigation strategies. Utilizes a variety of assessment tools, such as Nmap, BurpSuite, Kali Linux and scripting languages like Bash, Python, Perl, or Ruby. Familiar with red team testing protocols and cybersecurity frameworks like OWASP, OSSTMM and PTES. Stays up to date with the latest security threats, techniques, and tools to continuously improve penetration testing methodologies. In addition to providing technical expertise, this position communicates risk posture to management, advises on secure design, development, and mitigation strategies, and mentors staff to strengthen the agencys overall security capabilities. The Virginia Department of Motor Vehicles (DMV), headquartered in Richmond, Virginia, serves approximately 6.2 million licensed drivers and ID card holders with over 8.4 million registered vehicles. In addition, DMV serves a wide array of businesses, including dealers, fuels tax customers, rental companies, driving schools, other state agencies, local governments, and non-profit organizations. DMV operates upon five fundamental core values: Trustworthiness, Respect, Accountability, Integrity, and Teamwork (TRAIT). We dont just talk about our core values, we live them! Minimum Qualifications Extensive experience with hands?on penetration testing and vulnerability assessment. Proven background in using testing tools, conducting network, application and cloud penetration tests, manual testing and exploitation. Experience in secure code review and static/dynamic application security testing, Red Teaming or adversary emulation exercises. Experience leading testing projects, writing reports for executives and coordinating remediation with technical staff.
Additional Considerations
Preferred possession of, or documented course enrollment with an endorsed application for, certification for CEH, OSCP, OSWE, OSEP, OSED, GPEN and/or GWAPT.
#J-18808-Ljbffr