Understanding of Pen Test methods such as Open Source Security Testing Methodology Manual (OSSTMM), Open Web Application Security Project (OWASP), Penetration Testing Execution Standard (PTES), FedRAMP Penetration Test Guide, NIST, etc.

Leading Penetration Team Operators to perform network mapping and reconnaissance, internal and external Testing including Red Team testing activities that focus testing activity towards accessing specific target datasets.

Proficient in the use of testing frameworks, tools, and scripting and development languages, such as Kali Linux, Cobalt Strike, OST, Burp Suite, Docker, etc. Experience conducting penetration testing, red team, and/or purple team assessments as a consultant or a demonstrated ability to support multiple concurrent assessments.

At least 3 years of experience testing technology controls based on established industry risk frameworks, including: the NIST Cybersecurity Framework, COBIT v5, COSO or FedRAMP. This position - Principal Associate, Governance, Risk Identification, and Testing (GRIT) - will play a key role in the organization's second line of defense independent controls review program by providing technical expertise in assessing the overall effectiveness of the company's technology (including both cybersecurity and technology) controls environment.

The following skills are not required from applicants but would be considered a plus: Reputable security certifications, including but not limited to: OSCP, OSCE, OSWE, OSEE, OSWP, GPEN, GXPN, CMWAPT Experience working at a reputable penetration testing company.

Interpretation and/or collation and integration of draft elements (e.g. flow cytometry, cytogenetics, NGS targeted panel results, molecular testing, peripheral blood or bone marrow smear) of reports, including review of current and prior clinical and laboratory findings.

Collaborate with the Red Team to integrate web application penetration testing findings into broader threat emulation scenarios and organizational security assessments. This role provides domain expertise in Penetration testing of Infrastructure and Networks, Web Applications, Cloud and Social engineering, as well as Red Team and Purple Team internal engagements.

Performs selected patient/ laboratory testing, including Point of Care Testing, tuberculosis skin testing, electrocardiography, pulmonary function tests, vision and hearing testing.

Hands-on experience with security tools for static code analysis, dynamic application security testing (DAST), and vulnerability scanning, using tools such as Fortify, Acunetix, and Prisma Cloud.

Experience with Federal RPA implementations Demonstrated ability to follow best practices for UiPath RPA bot development, code reviews, and source code control Experience with Unit Testing Defect Remediation Experience providing post-install support (Hypercare) Minimum of a BA/BS Degree Preferred Skills: UiPath Certified Professional – Automation Developer Professional UiPath Certified Professional – Specialized AI Professional Attachments.

Experience with penetration testing using various automation tools,security patch management, secure cloud and hybrid engineering, and CDS. Responsible for software assurance, penetration testing with a range of automated tools, security patch management, secure cloud and hybridengineering, and CDS.

Experience and proficiency developing and implementing quality assurance and testing programs for workloads that are implemented with AWS services, and software development technologies that include Vue.js, Python, Django, S3, SNS, SQS, Docker, EKS/Kubernetes, AWS Step Functions, EventBridge, AWS Lambda, AWS API Gateway, Elasticsearch, Caching frameworks, like Redis, Memcached, the Amazon Relational Database Service (RDS) for Postgres, the MongoDB NoSQL database service, and other AWS services.

Combination of Federal IT and auditing in the following with a minimal of two (2) certifications– one in Information Technology technical area certifications in the following: Certified Information Security Auditor (CISA), Certified in Risk and Information Systems Control, Certified Internal Controls Auditor, Certification in Risk Management Assurance (CRMA), or similar certification related to IT testing.

Conduct radiation compliance testing after all repairs affecting the imaging chain (generator, X-ray tube, collimator, image receptor) of a unit or any other modification that makes re-testing necessary.

Materials testing certifications relating to the inspection and testing of asphalt, concrete, soils, metals, striping and other materials from governing bodies such as ACI, VDOT, AWS, NICET, or other governing bodies is highly desired.