Pen Tester

Chimes | Pen Tester | Remote Position We're looking for a Penetration Tester to evaluate the security of authorized systems, applications, networks, devices, and facilities.Location: This role is remote within the USA.

You must be legally authorized to work in the US.

Chimes does not provide visa sponsorship.

Individuals participating in the AbilityOne Program are encouraged to apply.

AbilityOne participation is not required.

Chimes will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.What you'll do


* Plan and conduct authorized penetration tests, vulnerability assessments, and adversarial simulations within approved rules of engagement.


* Safely identify and validate weaknesses in networks, applications, operating systems, devices, configurations, and physical-security controls, using approved tools and manual techniques to assess attack paths, privilege escalation, and potential data exposure.


* Research current threat tactics, techniques, vulnerabilities, and defensive countermeasures, and evaluate testing tools and techniques before approved operational use.


* Document test scope, methods, evidence, affected assets, severity, and recommended corrective actions, and prepare technical reports and executive summaries that communicate findings and risk accurately.


* Brief system owners, technical teams, and leadership on findings and remediation options; retest corrected findings and document closure evidence or residual risk.

What you bring


* Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field preferred.


* A recognized penetration-testing, ethical-hacking, or offensive-security certification preferred.


* Equivalent combinations of related education, training, and experience may be considered.


* Three (3) or more years performing authorized penetration testing, vulnerability assessment, security research, or related work.


* Experience testing networks, applications, operating systems, or endpoint devices using approved tools and manual techniques.


* Experience preparing technical findings and presenting remediation recommendations to varied audiences.


* Experience in government, regulated, or security-conscious environments preferred.

Degrees and certifications in computer science, data science, or related fields are preferred, but equivalent education and experience are welcome.Compensation:This is a remote position open to candidates in the United States.

Base salary is determined by the candidate's work location, along with skills, experience, and internal equity.

The ranges below reflect the minimum and maximum base pay for each geographic tier:


* Tier 1 (Washington, DC and Northern Virginia): $$64.45 - $78.77 per hour


* Tier 2 (Baltimore, M...