Ethical Hacker

 3332112

** U.S Citizens and GC Holders **

6-month contract to hire

Top Three Skills:

1.) Proven experience hacking/testing in medium to large environments. This includes Infrastructure and application experience. Mostly considered "White Hat" hacker. White hat hackers perform penetration testing, test in-place security systems and perform vulnerability assessments
2.) Proven experience with Control Assessments and evaluating and testing of the controls
3.) Proven experience monitoring, measuring and reporting on the effectiveness and efficiency of IT operational and security Processes, procedures and controls. 

Job Description: 

Looking to add a Certified Ethical Hacker to join their team in Winston Salem. This individual will work directly with the team manager and the GRC team. This person will be Cyber Security White Hat, Red Team hacker. This person will work mostly on White Hat where they will break into protected systems (or seemingly protected systems) and networks to expose vulnerabilities. They will document these vulnerabilities and work with IT Security to remediation. This person would also be on the Red Team when they are testing GRC Cyber security controls and evaluating the controls, evaluating QRadar as a SIEM etc. This person would work towards making sure the controls are accurate, an example may be around administrative rights to the workstation. This person would go in to try and prove them wrong, detail the activities and present findings. The consultant will be tasked with digging in on both the Infra (Windows, Network etc) to give the team a clear view of what's truly under the hood. This will include Vulnerability Assessments, Penetration Testing and Red Team hacking actions as well. Must have proven experience penetrating/hacking into various systems and applications. Ultimately, looking for this resource to try and see if they get caught and if/or their tools are alerting and ultimately being re-mediated. They will also be tasked with diving into key critical applications and looking for "soft" areas that may be exploited by outside entities.