Penetration Tester (Mid or Senior Level)

Energy Vault is hiring a Mid or Senior Level Penetration Tester in Tysons, VA. The role involves conducting network and application penetration testing, developing threat analysis reports, and formulating remediation strategies. Candidates should have experience with ethical hacking tools, scripting, and knowledge of network architecture. A degree in computer science or related field is required, along with a passion for sustainability. This is a full-time, on-site position.
At Energy Vault we are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants. We believe inclusion creates opportunity for collaborative excellence through diversity of thought. We invite individuals of all genders, races, identities, ethnicities, sexual orientations, national origins, abilities, protected veteran status, religions, educational and socioeconomic backgrounds to explore employment with our organization.
What you will do
• Use industry-standard tools (Kali Linux, Metasploit Framework, Nessus/Tenable, etc.) to conduct network penetration testing (edge routers, switches, firewalls, etc.), web and mobile application testing, ad wireless network assessments
• Develop comprehensive threat analysis reports and presentations for both technical and non-technical audiences of varying levels of familiarity
• Formulate remediation strategies for both theoretical and practical discovered vulnerabilities, discussing plans with internal stakeholders
• Safely utilize non-destructive ethical hacking tools, tactics, and procedures
• Develop plans and scripts to facilitate an automated and persistent threat scanning architecture
• Conduct social engineering assessments
• Shape a culture of collaboration, innovation, constant improvement, excellence, transparency, open mindedness, humility, integrity, efficiency, joy, compassion, and fulfillmentWhat a qualified candidate should possess
• Experience with industry-standard ethical hacking tools for scanning, exploitation, packet capture, and brute-force attempts (Kali Linux, Metasploit Framework, Nmap / Zenmap, Wireshark, John the Ripper, Burp, Nessus/Tenable, OWASP ZAP)
• Scripting ability (Python, Bash, Ruby, etc.) for automation and assessment purposes
• Experience in mixed-mode architectures employing heterogenous (IT/OT) devices and systems, such as DoD/IC equipment systems, industrial control systems, or equivalent
• Experience with functional and integration testing, understanding the interplay between functional requirements and security requirements
• Experience with both zero-knowledge hacking practices (TryHackMe, Hack the Box, etc.) and knowledge-based hacking practices (Nessus/Tenable, etc.)
• Knowledge of network architecture and hardware (switches, hardware, and software firewalls, etc.)
• Knowledge of multiple operating systems and their relative security practices
• Familiarity with common cryptographic methods and protocols
• Familiarity with Agile methods and practices for issue tracking (Jira)
• Familiarity with basic cloud architecture and platforms (AWS, GCP, etc.)
• Bachelor’s or Associate’s degree in computer science, information technology, cybersecurity, or a related field
• Comfort in fast-paced, rapid growth environments
• Experience in public companies is a plus
• A passion for sustainability is critical to our purpose, mission, and vision!