Senior Penetration Tester

AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test & Evaluation, Program Mission Support, Engineering & Analysis, and Training.

As a Senior Information Systems Security Officer with AMERICAN SYSTEMS you will have the opportunity to do the following:

Penetration Testing: Plan, execute, and report on penetration tests and security assessments on submarine systems to uncover security weaknesses.
• Vulnerability Analysis: Analyze and prioritize vulnerabilities and security gaps found during assessments, and work with engineers to develop mitigation strategies.
• Security Assessments: Perform in-depth security assessments on network and system architecture to ensure adequate protection against threats.
• Reporting & Documentation: Produce detailed, accurate, and clear reports for technical and executive audiences, outlining findings, risks, and recommended actions.
• Collaboration: Engage with cross-functional teams such as engineering, IT, and operations to ensure security is integrated into system designs and operations.
• ool Development: Design and implement tools, techniques, and methodologies to improve the penetration testing process and automate repeatable tasks.
• Continuous Learning: Stay current with the latest cybersecurity trends, tools, and methodologies relevant to maritime and submarine systems

• Bachelor's degree in Computer Science, Cybersecurity, or a related field; an advanced degree is a plus.
• A minimum of 5 years of experience in penetration testing, with at least 2 years focused on submarine or maritime systems.
• Relevant certifications such as OSCP, OSCE, CEH, or GPEN are highly desirable.
• Proficiency in various penetration testing tools (e.g., Metasploit, Burp Suite, Nmap) and scripting languages (e.g., Python, Bash).
• Strong understanding of network protocols and security architecture specific to submarine systems.
• Excellent analytical skills and attention to detail, with a strong ability to communicate complex security issues to all levels of the organization.