ApplyDescription
K2United is an organization housing two distinct, national, customer-facing brands tied together by a shared purpose to create solutions so those we serve thrive. Through our brands, K2Share and CareerSafe, we provide advisory services in cyber risk management and online education for workforce readiness. K2Share is an experienced cybersecurity firm with over 24 years of government consulting and advisory services to numerous federal agencies. We offer a comprehensive set of services and solutions designed to strengthen the cybersecurity of our federal clients’ networks, systems, and data, including:
- Innovative cybersecurity training and workforce development support to meet the ever-changing cyber environment and current threats.
- Cybersecurity strategy, policy, and governance support at the C-suite level.
- Business intelligence, analysis, and data visualization through advanced real-time dashboarding, including our proprietary Cybersecurity Framework (CSF) Risk Scorecard.
K2Share is seeking a highly skilled Cyber Penetration Tester/Assessor to support the operation and execution of enterprise-level penetration testing initiatives. This position is contingent upon K2Share securing an upcoming contract.
About You:
You have experience being responsible for ensuring compliance with federal regulations and standards, conducting comprehensive penetration testing on AI systems and tools, and developing essential documentation. You excel at:
- Conducting penetration testing on AI systems and tools, ensuring a comprehensive assessment for all infrastructure and public-facing components, in line with established standards.
- Developing Security Assessment Plans (SAP), penetration test schedules, and Rules of Engagement documents.
- Preparing a Security Assessment Report (SAR) for tested systems and delivering the results to stakeholders.
- Following the National Institute of Standards and Technology (NIST) guidelines, including the Risk Management Framework, Federal Information Processing Standards (FIPS), Office of Management and Budget (OMB) policies, and other federal regulations governing IT security during penetration testing activities.
Requirements
- 6 years of experience conducting penetration testing and web application testing against security controls.
- 6 years of experience in scoping and executing penetration tests against a variety of technologies, including web applications, mobile, and federal cloud infrastructures.
- 5 years of experience in network/application vulnerability assessment and penetration testing services through a comprehensive testing process, identifying weaknesses and vulnerabilities within the system, and proposing countermeasures.
- 5 years of experience with conducting individual assessments on a basis for Federal enterprises to raise and increase the security posture across the Federal organization.
- 6 years of Experience in Information system network vulnerability assessment and penetration testing.
- Must have at least one of the following certifications: Certified Ethical Hacker, Pen Test +, Network +, Security +, or equivalent.
- Must be certified through DHS CISA Assessment Evaluation and Standardization (AES) and have AES CISA HVA training certification for the operator role.
- Must possess a Bachelor’s degree at a minimum
- Ability to obtain and maintain a U.S. Public Trust clearance
Who is K2United?
At its core, K2United is a group of unique people coming together to do the remarkable. We believe in creating a workplace where sincerity and open communication are the norm. We value respect, encourage innovation, and believe wholeheartedly in the value of collaboration and a little nerdy camaraderie. Our talented teams have provided cybersecurity advisory services to federal agencies for over 20 years, and we also develop industry-recognized online education through our CareerSafe brand. We think we’re a pretty fantastic company to work for, but you don’t have to take our word for it: K2United is a certified Great Place to Work® and has been named one of the Best Small Workplaces™ in the U.S.
Benefits:
We’re invested in the people who make our success possible. As a K2United employee, you’ll enjoy a comprehensive set of benefits and opportunities that meet you where you are. These benefits include:
- 401(k) plan with employer matching contributions
- Low-cost, comprehensive medical benefits for employees and their families
- Flexibility for those needing time off for jury duty, voting, military leave, etc.
- Wellness stipend program (includes fitness reimbursement program)
- Casual dress work environment
- Technical training and certifications as required
- Any of our CareerSafe Online training courses for free to employees and their immediate family
Applicants must be willing to take a drug test and submit to a credit and background investigation as part of the selection process.
The U.S. government restricts access by Foreign Nationals to certain types of technology and technical data. Consequently, this posting is intended only for U.S. citizens. K2United, LLC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected Veteran status. This job description is not an exhaustive list of job responsibilities.
K2United management reserves the right to change or alter this job description at any time without notice.
