ZipRecruiter

Log In

1

Ethical Penetration Testing Jobs in Alabama (NOW HIRING)

Workiva

$40/hr

Strong ethical and discretionary ability to handle sensitive information and data * Strong ... Familiarity with vulnerability scanning tools and/or penetration testing techniques * Familiarity ...

New

Workiva

$40/hr

Strong ethical and discretionary ability to handle sensitive information and data * Strong ... Familiarity with vulnerability scanning tools and/or penetration testing techniques * Familiarity ...

New

Workiva

$40/hr

Strong ethical and discretionary ability to handle sensitive information and data * Strong ... Familiarity with vulnerability scanning tools and/or penetration testing techniques * Familiarity ...

New

Workiva

$40/hr

Strong ethical and discretionary ability to handle sensitive information and data * Strong ... Familiarity with vulnerability scanning tools and/or penetration testing techniques * Familiarity ...

New

Cloudera

$150K - $185K/yr

Regularly participate in account penetration / success strategy planning, working with sales ... Hands-on experience with the full lifecycle of AI models - from development and testing to ...

All JobsEthical Penetration Testing JobsEthical Penetration Testing Jobs in Alabama

Ethical Penetration Testing information

What is ethical penetration testing?

Ethical penetration testing, also known as ethical hacking, is the practice of simulating cyberattacks on a computer system, network, or application with the permission of its owner. The goal is to identify security vulnerabilities before malicious hackers can exploit them. Ethical penetration testers use the same tools and techniques as cybercriminals but report findings so they can be fixed, helping organizations strengthen their security. This process is a critical part of a comprehensive cybersecurity program and helps ensure compliance with industry regulations.

What are the key skills and qualifications needed to thrive as an ethical penetration tester?

To thrive as an Ethical Penetration Tester, you need strong knowledge of network security, operating systems, and common vulnerabilities, typically backed by a degree in computer science or cybersecurity and relevant certifications like CEH or OSCP. Familiarity with tools such as Metasploit, Burp Suite, and Nmap is essential for simulating and assessing security threats. Critical thinking, problem-solving, and effective communication are key soft skills for identifying risks and clearly reporting findings to technical and non-technical stakeholders. These competencies ensure that security assessments are thorough, actionable, and help organizations strengthen their defenses against real-world cyber threats.

What are some common challenges faced by ethical penetration testers during client engagements?

Ethical penetration testers often encounter challenges such as limited timeframes to conduct thorough assessments, incomplete or ambiguous scope definitions from clients, and the need to balance effective testing with minimal disruption to live systems. Communication is key—testers must clearly report findings and collaborate with IT teams to remediate vulnerabilities. Additionally, staying current with emerging threats and tools is essential to deliver valuable insights and maintain industry standards.

What is the difference between Ethical Penetration Testing vs Vulnerability Analyst?

AspectEthical Penetration TestingVulnerability Analyst
CertificationsOSCP, CEH, GPENCompTIA Security+, CISSP, CEH
Work EnvironmentSimulated attacks on systems to identify security gapsAnalyzing vulnerabilities and assessing risk levels
Industry UsageSecurity firms, IT departments, consultingSecurity teams, risk management, compliance

Ethical Penetration Testers actively simulate cyberattacks to find exploitable weaknesses, while Vulnerability Analysts focus on identifying and prioritizing security flaws through assessments. Both roles require similar certifications and often work within the same industry sectors, but their core activities differ: testing versus analysis.

What are popular job titles related to Ethical Penetration Testing jobs in Alabama?

For Ethical Penetration Testing jobs in Alabama, the most frequently searched job titles are:

What job categories do people searching Ethical Penetration Testing jobs in Alabama look for?

The top searched job categories for Ethical Penetration Testing jobs in Alabama are:

What cities in Alabama are hiring for Ethical Penetration Testing jobs?

Cities in Alabama with the most Ethical Penetration Testing job openings:

Ethical Penetration Testing jobs near you
Infographic showing various Ethical Penetration Testing job openings in Alabama as of August 2026, with employment types broken down into 1% As Needed, 86% Full Time, 9% Part Time, 1% Temporary, 2% Contract, and 1% Nights. Highlights an 87% Physical, 3% Hybrid, and 10% Remote job distribution.

Cybersecurity Specialist

Centreville, AL • On-site

Cahaba Medical Care Foundation
See more jobs at Cahaba Medical Care Foundationexternal

Full-time

Posted 4 days ago

Job description

Cybersecurity Specialist


Reports to Director of Infrastructure


Background: Cahaba Medical Care Foundation is a community health center providing medical, pharmacy, dental, and behavioral health services to diverse underserved communities in Alabama. We are a Level 3 Patient-Centered Medical Home and Joint Commission accredited organization, committed to increasing integration and coordination of behavioral health and primary care. This is an exciting, fast paced practice with a strong mission and commitment to providing high quality care. 


Position Summary: The Cybersecurity Specialist will be the dedicated champion for the security posture of our Federally Qualified Health Center (FQHC). Reporting directly to the IT Director/Director of Infrastructure, this role will transition our security from a shared team responsibility to a focused, proactive program. You will be responsible for safeguarding patient data (PHI), ensuring HIPAA compliance, managing security vendor relationships, implementing further endpoint controls, and leading our internal vulnerability assessments.


Responsibilities and Duties:

  • Vulnerability & Threat Management: Lead annual security risk assessments and ongoing internal penetration testing. Analyze results, prioritize remediation, and work with the IT team to patch vulnerabilities.

  • MDR/SIEM Oversight: Serve as the primary point of contact and administrator for our 24/7 security monitoring partner. Monitor alerts, investigate incidents, and lead response efforts.

  • Endpoint & Identity Security: Take ownership of securing our mixed-OS environment. Maintain Google Workspace Enterprise policies for Chromebooks, and spearhead the selection, implementation, and management of a Mobile Device Management and directory solution for our Windows and Mac endpoints.

  • Network & Access Control: Maintain and optimize our RADIUS-based network authentication and access controls to ensure secure connectivity across all clinic sites.

  • Compliance & Governance: Ensure all IT systems and workflows align with HIPAA, HITECH, and other healthcare regulatory frameworks. Maintain documentation for audits.

  • Security Awareness: Develop and run ongoing security awareness training and phishing simulations for FQHC staff.


Qualifications:

  • Experience: 3–5 years of dedicated experience in cybersecurity or information security, preferably within a healthcare (FQHC/hospital) or highly regulated environment.

  • Technical Stack Familiarity:

    • Strong knowledge of Google Workspace Enterprise administration and ChromeOS security.

    • Proven experience implementing MDM solutions from scratch.

    • Familiarity with Network Access Control (NAC) and RADIUS protocols.

    • Experience working with co-managed SIEM/MDR providers.

  • Certifications (Preferred but not required): CompTIA Security+, CEH (Certified Ethical Hacker), GSEC, or HCISPP (Healthcare Information Security and Privacy Practitioner).

  • Soft Skills: A collaborative mindset. You will be embedding security into the workflows of a busy IT team and medical staff, so empathy and clear communication are key.

Apply