Penetration Testing Consultant

About TÜV Rheinland Group

Joining TÜV Rheinland means working for one of the world’s leading testing, inspection, and certification service providers with more than 20,000 employees globally. Our employees are our most important asset. That is why we invest in their development and offer competitive pay, multiple health insurance plan options, and a 401(k) with up to 6% company match. At the same time we live an international, team-oriented culture characterized by respect, collegiality and openness. This enables our employees to develop their potential, apply new knowledge and methods directly - and plan a long-term career with real opportunities for advancement.

Summary of the Penetration Testing Consultant Role

This is a technical role requiring solid knowledge of information systems and information security, preferably with a strong computer science background. As a Penetration Testing Consultant, you must understand applications, networking, operating systems, and various penetration testing tools and frameworks.

You are also expected to interface with clients and manage your workload with minimal oversight. A willingness to contribute scripting, tools, and methodology to help keep the TÜV Rheinland OpenSky Red Team up to date with new industry advancements is highly valued.

Principal Duties And Responsibilities

• Meet with clients to set rules of engagement, timelines, and expectations.
• Perform network, mobile, web, and IoT penetration testing.
• Accurately document and report on findings discovered during penetration testing activities.
• Ability to be a self-starter and manage testing projects with minimal oversight.
• Performs off-hours work as necessary – rare, but occasionally required.

Location and Work Environment

This is a remote position, with occasional required travel. It is expected that the candidate will be available during normal business hours and will have access to high-speed internet.

Qualifications & Requirements

• Excellent communication skills and a strong personal commitment to quality service.
• The ability to work independently and with a team.
• Ability to work remotely and with remote resources as needed.
• Ability to work with different personalities with varied skill levels.
• Ability to understand and implement complex end-user requirements.
• Ability to effectively organize work across multiple projects.
• Minimum 3 years’ general IT experience (networking, IT support, Blue Team, or development type roles).
• Thorough understanding of networking, operating systems (Unix/Mac/Windows/Linux), and at least one scripting language.
• Experience with traditional penetration testing tools: Kali Linux, Metasploit, Nmap, Burp Suite, Vulnerability Scanners (Qualys, Nessus, etc.).
• 1-3 years’ experience in penetration testing, multiple disciplines preferred.
• Ability to travel nationally to perform services.

Preferred Skills / Expertise

• 5+ years of experience of overall service management with a strong working knowledge of various ServiceNow applications such as Service Desk, Change Management, Asset Management, CMDB, Knowledge Management and Service Catalog/Service Request Management.
• Excellent oral and written communication skills.
• Good analytical and problem-solving skills to resolve technical issues.
• OSCP, GPEN, CEH, or equivalent certifications.
• Previous experience in some type of software development role.

Education

Bachelor’s degree in Computer Science or similar preferred.

Experience

Willing to train.

Certifications

Willing to provide opportunities for certifications.

Physical Demands & Work Environment

Will work remotely most of the time but occasionally will be required to go to customer site. Work may be sedentary, sitting for long periods of time, working at a computer.

Equipment Used

• Laptop or Desktop Computer.
• Phone or Headset.

Travel Required

Ability to travel up to 25% may be required for this position.

Key skills/competency

• Penetration Testing
• Information Security
• Network Security
• Vulnerability Assessment
• Client Management
• Kali Linux
• Burp Suite
• Scripting
• Reporting
• IoT Security