Cloud Penetration Tester

This role will support the improvement of cybersecurity analytics by conducting cloud adversarial emulation testing on the Department of Veterans Affairs (VA) Enterprise Cloud (VAEC) systems. The ideal candidate will have a strong background in penetration testing, particularly in cloud environments, and experience with purple-teaming activities.

In this role, a typical day will include:

• Conduct cloud adversarial emulation testing and assessments on VAEC resources.
• Perform purple-team activities to identify and exploit vulnerabilities, ensuring they are remediated in a correct and timely manner.
• Provide a weekly report detailing the number of planned tests, tests completed, and the outcomes of each test.
• Support 3rd party purple team Cybersecurity Infrastructure Security Agency (CISA) assessments on VAEC resources.
• Collaborate with cybersecurity engineers, analysts, and other stakeholders to ensure alignment and effective communication of findings.
• Stay current with the latest cloud security trends, tools, and best practices to ensure the effectiveness of penetration testing activities.
• Document and report vulnerabilities and provide recommendations for remediation to enhance the security posture of VAEC systems.

Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• 3+ years of experience in penetration testing, particularly in cloud (AWS, Azure, Microsoft 365, etc.) environments.
• Proven experience in adversarial emulation testing and purple-teaming activities.
• Strong understanding of cybersecurity principles, particularly in cloud environments.
• Proficiency in using penetration testing tools and technologies.
• Certification in penetration testing or ethical hacking (e.g., OSCP, CEH) is a plus.
• Excellent organizational skills and attention to detail, with the ability to manage multiple tasks simultaneously.
• Exceptional written and verbal communication skills
• Exceptional analytical and conceptual thinking skills
• Strong people skills and ability to work collaboratively with a team of peers