Penetration Testerat CDW Careers

Focal Point Data Risk, a CDW Company, is one that delivers a unified approach to addressing data risk through a unique combination of consulting service offerings.  Focal Point has brought together industry-leading expertise in cyber security, identity governance and access management, data privacy and analytics, internal audit, and hands-on training services, giving companies everything, they need to plan and develop effective risk and security programs. By integrating these services, we provide our clients with the flexible support they need to protect and leverage data across any part of their organization. Simply put, CDW-Focal Point is the next generation of risk management. 
The ideal hire will possess a broad skill set and have the capacity for learning required to sustain our client engagements. The responsibilities that you will be given will make the most of your strengths and challenge you to develop even further in a supportive, team-focused atmosphere. 

What you will get to do:

• Configure, run, and monitor automated security testing tools 
• Perform manual validation of vulnerabilities 
• Perform manual penetration testing of client systems, web sites, and networks to identify and exploit vulnerabilities 
• Thoroughly document exploit chain/proof of concept scenarios for client consumption 
• Work successfully from home office environment 
• Perform overnight work as necessary (less than 10%) 
• Work onsite and at client locations as necessary 

Minimum Qualifications:

• 1+ years of experience with vulnerability assessment and penetration best practices
• 1+ years of experience with vulnerability and penetration testing techniques and tools
• 1+ years of experience with programming experience in Python, PHP, Perl, Ruby, .NET, or other interpreted or compiled languages 
• Ability to travel up to 10%
• Ability to perform overnight work as necessary (less than 10%)
• 1+ years of experience and/or detailed knowledge of one or more of the following technologies: 
  • Security testing tools including Metasploit, Nmap, Nessus, Burp Suite, or equivalents
  • Linux operating systems
  • Microsoft technologies
  • Mobile application programming and/or security testing
  • Wireless technologies
  • Web application technologies
  • Network implementation (operational and security)
  • Telephony technologies (analog and IP)
  • Social engineering
  • Physical security
  • Source code analysis software
  • Intermediate to advanced Microsoft Office Suite (i.e., Word, Excel, PowerPoint) 

Preferred Qualifications:

• 2+ years of hands-on penetration testing experience
• Currently has or desires to obtain one or more security-related certifications, including but not limited to: 
  • Certified Information Systems Security Professional (CISSP)
  • GIAC Penetration Tester (GPEN)
  • GIAC Certified Incident Handler (GCEH)
  • Offensive Security Certified Exert (OSCE)
  • Offensive Security Certified Professional (OSCP)