Parsons Corporation
Junior PenTest Vulnerability Analyst
Parsons Corporation - Chantilly, Virginia, United States, 20153
Work at Parsons Corporation
Overview
- View job
Overview
Penetration Tester (PenTest) & Vulnerability Analyst
Parsons is looking for a talented Penetration Tester (PenTest) & Vulnerability Analyst to join our growing team! In this role you will get to maintain vulnerability assessment toolkits supporting mission critical efforts. You must be willing to travel up to 25% of the time. At most, one week per month, but travel will likely be less frequent (most sites CONUS). What You'll Be Doing: Conduct Vulnerability Assessment of Network, Host, and Web Applications, leveraging tools such as Tenable Nessus, NMAP, Wireshark, Rapid7 Metasploit, Burp Suite, etc. Work closely with the Security Control Assessor to perform IT security assessments in support of Risk Management Framework (RMF). Maintain vulnerability assessment toolkit utilizing Ubuntu and Kali platforms Prepare assessment reports that identify technical and procedural findings, and provide recommended remediation strategies/solutions. Research vendor security advisories, vulnerability reports, product changelogs, bug trackers, commits, exploits, and other sources to triage vulnerabilities. Communicate effectively with various stakeholders, including System Owners, Administrators, and Program Management. Participate in meetings and briefings to coordinate test events, recommend remediation, and provide lessons learned. What Required Skills You'll Bring: Active Certification: IAT 8570 Level 1 (Sec+, etc) Active TS/SCI with CI Poly Must be willing to travel up to 25% of the time. At most, one week per month, but travel will likely be less frequent. Most sites CONUS. Bachelors degree in a relevant field. Additional years of experience can count in lieu of a degree (AS with 3+ years, or high school degree with 5+ years of relevant experience). Knowledge of network security architecture concepts including protocols, components, and principles. Knowledge of Risk Management Framework, in particular the technical controls within 800-53. Knowledge of system and application security threats and vulnerabilities, TCP/IP, and the OSI Model. Knowledge of penetration testing principles, tools, and techniques. Knowledge of threat research, vulnerability analysis, risk assessment, CVSS scoring, and Common Vulnerabilities and Exposures (CVE). Strong problem-solving and critical-thinking skills with the ability to diagnose and troubleshoot technical issues. What Desired Skills You'll Bring: Experience evaluating systems and recommending changes to improve security posture. Experience with penetration testing, system and network configuration, and familiarity with different operating systems and virtualization platforms. Skill in conducting vulnerability scans and recognizing vulnerabilities and remediation recommendations. Hands on experience using industry standard vulnerability assessment tools and techniques (NMAP, Nessus, Metasploit, Wireshark). Security Clearance Requirement: An active Top Secret SCI w/Polygraph security clearance is required for this position. Salary Range: $86,700.00 - $151,700.00 We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle! Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status. We truly invest and care about our employee's wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons questAPPLY TODAY!
Parsons is looking for a talented Penetration Tester (PenTest) & Vulnerability Analyst to join our growing team! In this role you will get to maintain vulnerability assessment toolkits supporting mission critical efforts. You must be willing to travel up to 25% of the time. At most, one week per month, but travel will likely be less frequent (most sites CONUS). What You'll Be Doing: Conduct Vulnerability Assessment of Network, Host, and Web Applications, leveraging tools such as Tenable Nessus, NMAP, Wireshark, Rapid7 Metasploit, Burp Suite, etc. Work closely with the Security Control Assessor to perform IT security assessments in support of Risk Management Framework (RMF). Maintain vulnerability assessment toolkit utilizing Ubuntu and Kali platforms Prepare assessment reports that identify technical and procedural findings, and provide recommended remediation strategies/solutions. Research vendor security advisories, vulnerability reports, product changelogs, bug trackers, commits, exploits, and other sources to triage vulnerabilities. Communicate effectively with various stakeholders, including System Owners, Administrators, and Program Management. Participate in meetings and briefings to coordinate test events, recommend remediation, and provide lessons learned. What Required Skills You'll Bring: Active Certification: IAT 8570 Level 1 (Sec+, etc) Active TS/SCI with CI Poly Must be willing to travel up to 25% of the time. At most, one week per month, but travel will likely be less frequent. Most sites CONUS. Bachelors degree in a relevant field. Additional years of experience can count in lieu of a degree (AS with 3+ years, or high school degree with 5+ years of relevant experience). Knowledge of network security architecture concepts including protocols, components, and principles. Knowledge of Risk Management Framework, in particular the technical controls within 800-53. Knowledge of system and application security threats and vulnerabilities, TCP/IP, and the OSI Model. Knowledge of penetration testing principles, tools, and techniques. Knowledge of threat research, vulnerability analysis, risk assessment, CVSS scoring, and Common Vulnerabilities and Exposures (CVE). Strong problem-solving and critical-thinking skills with the ability to diagnose and troubleshoot technical issues. What Desired Skills You'll Bring: Experience evaluating systems and recommending changes to improve security posture. Experience with penetration testing, system and network configuration, and familiarity with different operating systems and virtualization platforms. Skill in conducting vulnerability scans and recognizing vulnerabilities and remediation recommendations. Hands on experience using industry standard vulnerability assessment tools and techniques (NMAP, Nessus, Metasploit, Wireshark). Security Clearance Requirement: An active Top Secret SCI w/Polygraph security clearance is required for this position. Salary Range: $86,700.00 - $151,700.00 We value our employees and want our employees to take care of their overall wellbeing, which is why we offer best-in-class benefits such as medical, dental, vision, paid time off, 401(k), life insurance, flexible work schedules, and holidays to fit your busy lifestyle! Parsons is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, veteran status or any other protected status. We truly invest and care about our employee's wellbeing and provide endless growth opportunities as the sky is the limit, so aim for the stars! Imagine next and join the Parsons questAPPLY TODAY!