Penetration Tester
2 - 5 years
Greater Tampa Bay Area
Full-time
Onsite
1 month ago
About the role
Company Description
Bravo Six Cyber is a service-disabled veteran-owned business specializing in cybersecurity solutions for federal, state, and commercial clients. With a team of highly skilled professionals, many of whom have military and federal contracting expertise, the company is committed to protecting organizations from rapidly evolving cyber threats. Bravo Six Cyber delivers mission-critical services that safeguard clients' sensitive information and systems. The firm is dedicated to providing reliable, innovative, and mission-oriented cybersecurity support.
Role Description
▸
Assess publicly accessible systems, ports, and services; attempt controlled breach of the county's internal network perimeter
▸
Execute methodology aligned with PTES, NIST SP 800-115, and OWASP standards using black-box and white-box strategies
▸
Perform manual validation of all vulnerabilities discovered by automated tools
▸
Conduct controlled exploitation to confirm real-world risk — no destructive techniques
▸
Report both technical and business risk for all identified findings
▸
Escalate critical findings immediately to BSC Engagement Manager per established rules of engagement
▸
Produce technical findings section of final deliverable including severity ratings, exploitation evidence, and prioritized remediation guidance
◈ PREFERRED QUALIFICATIONS
◦
Experience targeting county or municipal government infrastructure
◦
Proficiency documenting to PTES and NIST SP 800-115 standards
Bravo Six Cyber is a service-disabled veteran-owned business specializing in cybersecurity solutions for federal, state, and commercial clients. With a team of highly skilled professionals, many of whom have military and federal contracting expertise, the company is committed to protecting organizations from rapidly evolving cyber threats. Bravo Six Cyber delivers mission-critical services that safeguard clients' sensitive information and systems. The firm is dedicated to providing reliable, innovative, and mission-oriented cybersecurity support.
Role Description
▸
Assess publicly accessible systems, ports, and services; attempt controlled breach of the county's internal network perimeter
▸
Execute methodology aligned with PTES, NIST SP 800-115, and OWASP standards using black-box and white-box strategies
▸
Perform manual validation of all vulnerabilities discovered by automated tools
▸
Conduct controlled exploitation to confirm real-world risk — no destructive techniques
▸
Report both technical and business risk for all identified findings
▸
Escalate critical findings immediately to BSC Engagement Manager per established rules of engagement
▸
Produce technical findings section of final deliverable including severity ratings, exploitation evidence, and prioritized remediation guidance
◈ PREFERRED QUALIFICATIONS
◦
Experience targeting county or municipal government infrastructure
◦
Proficiency documenting to PTES and NIST SP 800-115 standards
Skills
Information TechnologyComputer and Network Security