Penetration Tester

Function: Works under general supervision and participates in the design and development of internet/intranet systems. May work independently or as a part of a team. May serve as senior technical staff member for assigned projects. May coach more junior technical staff. General Characteristics: Integrally involved in the development and support of all Internet/Intranet/Extranet sites and supporting systems. Works closely with other IT groups and customers to define the system design and user interface based on customer needs and objectives. Participates in all phases of the development and implementation process, and may act as a project manager on special projects. Ensures the integration of the web servers and all other supporting systems by using message based middleware and interfacing with relational databases. Be knowledgeable of best-practices for building secure web applications. Responsible for developing client-side scripting and server-side application code. Extensive knowledge in using programming languages such as Visual Basic, HTML, XML, Java, and ASP. May require a bachelor's degree in a related area and 5-7 years of experience in the field or in a related area.

DAILY DUTIES / RESPONSIBILITIES:

PERFORM PENETRATION TESTING ON SCDOT PUBLIC FACING WEBPAGES AND VULNERABILITY SCANNING ON EXTERNAL AND INTERNAL APPLICATIONS. INDUSTRY STANDARDS ARE EXPECTED.

REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):

VULNERABILITY SCANNING,
PENETRATION TESTING, KNOWLEDGE OF SHAREPOINT

REQUIRED EDUCATION/CERTIFICATIONS:
CISSP

PREFERRED EDUCATION/CERTIFICATIONS:
CEH OR GIAC CERTIFICATIONS

All your information will be kept confidential according to EEO guidelines.