Company Overview:

TestPros is a successful and growing business, established in 1988 to provide Information Technology (IT) technical support services to a wide range of Commercial and U.S. Federal, State, and Local Government customers. Our capabilities include Program Management, Program Oversight, Process Audit, Intelligence Analysis, Cyber Security, NIST 800-53, NIST SP 800-171 / CMMC Consulting/Assessment/Compliance, PCI Compliance, SOC 2, GLBA, Zero Trust, Resiliency, Computer Forensics, Software Supply Chain Assurance, Software Testing, Test Automation, Section 508 and WCAG Accessibility Assessment and Remediation, Localization Testing, Independent Verification and Validation (IV&V), Quality Assurance (QA), Compliance, and Research and Development (R&D) services. TestPros is an Equal Opportunity Employer.

Position: Part time (as needed, 1099 or Corp. to Corp)

Job Summary:

The ideal candidate will have strong hands-on experience conducting external and internal vulnerability assessments, penetration testing, and compliance-based security evaluations for government or municipal environments. This role requires the ability to perform non-disruptive testing, work within outage windows, and deliver clear, executive-level reporting.

Key Responsibilities

Perform external penetration testing and vulnerability scanning across a /24 public IP space.

Conduct internal penetration testing across a /21 internal network, including multiple VLANs and network segments.

Execute an assumed-breach scenario, such as testing from a compromised workstation via VPN.

Conduct a public Wi-Fi security assessment, identifying wireless vulnerabilities and attack vectors.

Evaluate the City's current security posture against CJIS, CORA, and NIST standards.

Coordinate testing that may involve systems or IP ranges belonging to sister government agencies.

Work within designated planned outage windows to perform active testing without disrupting operations.

Document all findings, including:

What was tested

What was not tested

Identified vulnerabilities and exploitability

Severity and risk prioritization

Recommended remediation steps

Prepare a comprehensive final report and participate in review meetings if requested.

Required Qualifications

OSCP or OSCE certification (either meets the requirement).

5+ years of hands-on penetration testing and vulnerability assessment experience.

Proven experience performing both external and internal penetration tests in complex environments.

Strong understanding of:

Network segmentation

VPN-based testing

Active Directory

Cloud/SaaS environments

Firewall and IDS/IPS technologies

Experience with government, public sector, or municipal IT environments is highly preferred.

Ability to write clear, professional, and actionable technical reports.

Preferred Skills

Experience with SCADA-adjacent environments (testing is not performed on SCADA, but awareness is valuable).

Familiarity with CJIS security policy requirements.

Experience coordinating with multi-agency or cross-organizational IT teams.

Expertise with common tools such as Kali Linux, Burp Suite, Nmap, Metasploit, Nessus/Tenable, and Wireshark.

Engagement Details

Estimated Start: February 2026

Estimated Duration: 6-8 weeks

Work Location: Fully Remote (VPN access provided)

Clearances: Not required, but government experience is a plus

Benefits

TestPros offers a competitive salary, medical/dental/vision insurance, life insurance, paid time off, paid holidays, 401(k) retirement plan with company match, opportunities for professional growth, cell phone discounts, and much more! All benefits are per TestPros current policies and are subject to change without notice. Benefits are available to full-time employees.?

TestPros, Inc. is an Equal Opportunity Employer.

EEO Statement

All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, marital status, age, national origin, or protected veteran status.

TestPros

Latest Jobs

Penetration Tester - IT Security Audit (Short Term/Remote)