Senior Penetration Tester (Washington) Job at Business Process Management, Inc., Washington DC

U3pkZTBSL2NuU0ZBc1ludURFWkhZdE9zWkE9PQ==
  • Business Process Management, Inc.
  • Washington DC

Job Description

This position offers hybrid or remote work options; however, candidates must reside in Oregon, Washington, Nevada, Montana, or Idaho.*

BPM is looking for talented individuals who have a passion for security to join our team of technical security consultants and penetration testers in the Pacific Northwest. A solid understanding of manual penetration testing principals and their execution is essential. You understand that penetration testing is not just running common tools to poison mDNS requests, getting an SMB relay, pulling SPNs to find a crackable hash, or getting Domain Admin.

Prior client-facing penetration testing experience is preferred but is not required; common backgrounds on our team include: system administration, application development, computer science, malware research, military service, engineering, micro-electronics, or simply having a clear passion for technical systems.

At BPM, we believe in fostering a culture of growth and innovation. Employees in this role enjoy the personal and professional flexibility to strike their best work-life balance. Our business model prioritizes quality work over volume of work and rewards creative thinking. As a Senior Security Consultant, you will be responsible for conducting cyber security assessments to uncover vulnerabilities and advise clients on remediation strategies. Standard projects include penetration tests, social engineering, red team operations, application testing, and architecture review.

Working with BPM means using your experiences, broadening your skills, and growing in work and lifewhile also making a positive difference for your clients, colleagues, and communities. Our shared entrepreneurial spirit drives us to see and do things differently. Our passion for people makes BPM a place where everyone feels welcome, valued, and part of something bigger as we help clients understand their threat exposure and how to harden their defenses. Because People Matter.

What you get:

Total rewards package: from flexible work arrangements to personalized benefit structures, 401k match, multiple bonus opportunities, and financial compensation options that give you choice and flexibility.

Well-being resources: interactive wellness platform and incentives, an employee assistance program and mental health resources.

Balance & flexibility: Firm Holidays, Flex PTO, paid family leave, winter break, and remote work options , so you can balance challenging yourself with taking care of yourself.

Professional development opportunities: our cyber security team is led by technical subject matter experts that understand the rapid pace of the industry. Every member of the team is provided with multiple avenues for staff development such as formal certification, cutting-edge security research courses, and security conference attendance.

Who is successful at BPM:

Caring people who put others first

Critical problem solvers who bring inherent curiosity

Self-starters who embody the BPM entrepreneurial spirit

Authentic individuals with a diverse point of view

Lifelong learners with a drive to excel

Resilient people who rise to the occasion

Responsibilities
  • Perform detailed manual penetration tests of networks, applications, and systems
  • Conduct reconnaissance through open source intelligence (OSINT) on target clients to locate exposed data
  • Leverage collected data and provided client target details to successfully socially engineer client employees via emails and phone calls
  • Perform red team engagements to gain access to client specified resources through covert tests that blend multiple attack vectors
  • Document security vulnerabilities in-depth during client engagements
  • Effectively communicate findings and provide remediation guidance to both technical and non-technical stakeholders
  • Drive internal team innovation, collaboration, and advancement through professional development time
Requirements
  • A minimum of five years hands-on experience with security
  • A minimum of five years performing system administration, development, or a similar background in technology
  • Documented oral and written communication skills including complex technical document preparation
  • Strong understanding of network and application protocols (e.g., TCP, UDP, SMB, FTP)
  • Deep knowledge of how software works and interacts at various layers
  • Demonstrates adaptive and critical thinking skills to solve unique and challenging problems
  • Ability to use multiple operating systems with high proficiency (e.g., Windows, Linux, macOS)
  • Understanding of enterprise technology and experience with Active Directory
  • Strong comfort with languages such as Bash, Python, Go, and PowerShell
  • Experience with web development technologies (e.g., React, HTML, JavaScript, etc.)
  • Experience with tools commonly used to perform security testing (e.g., Nmap, Burp Suite, evilginx, hashcat, Metasploit, Nessus, impacket, C2 frameworks, nuclei, gophish, Dradis, Ghostwriter, etc.)
  • Familiarity with industry security standards and frameworks (e.g., NIST SP 800-53, NIST CSF, MITRE)
  • Must be able to pass criminal background checks
  • Must be eligible to work in the United States without sponsorship
  • Ability to thrive in a team environment that operates without ego
Bonus Qualifications
  • Incident response or digital forensics (DFIR) experience
  • Bachelor's degree in Computer Science or related technical field
  • Security certifications such as OSCP, CISSP, Security+, or similar
  • Experience with iOS or Android Mobile application development
  • Highly Proficient in at least one programming language such as C++, Java, .NET, Rust, Python, Go
  • Experience managing and deploying red team infrastructure
  • Have developed tooling or published security research for the greater security community
  • Experience with CIS Benchmarks and how to audit against them
  • Physical security experience & a desire to travel to client locations

$80,000 - $120,000 a year

Wondering if you should apply?

At BPM we are people who value people. We are progressive and purposeful. We are a firm with flexibility. Our shared entrepreneurial spirit drives us to see and do things differently. And our passion for people makes BPM a place where everyone feels welcome, valued, and part of something bigger.

***************

BPM provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. BPM welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process.

For positions based in San Francisco, consideration of qualified candidates with arrest and conviction records will be in a manner consistent with the San Francisco Fair Chance Ordinance.

Please note - this posting is for prospective candidates only. Unsolicited third-party resume submissions will be considered property of BPM and will not be acknowledged or returned.

#J-18808-Ljbffr

Job Tags

Full time, Local area, Remote work, Flexible hours,

Similar Jobs

Cypress HCM

RPA Developer (Salt Lake City) Job at Cypress HCM

 ...RPA Developer About the Role We are seeking a highly skilled Senior Intelligent Automation Analyst with strong background in developing RPA with a strong background in automating finance processes and building complex, scalable RPA bots. This role requires an experienced... 

Jobleads-US

Subject Matter Expert (SME) Cloud Computing - 0010WFH 1561 Job at Jobleads-US

 ...Run. The SME will provide critical insights into current methodologies, best practices, and technical requirements related to cloud computing and DevSecOps within the Kessel Run environment.Key Responsibilities :Provide expertise on existing cloud computing and DevSecOps... 

UPS

Senior Application Developer - DocuSign & Enterprise Integration Job at UPS

 ...are looking for a highly experienced **Senior Application Developer** with 8+ years of software development expertise, including **DocuSign CLM+** , **DocuSign eSignature** , **XML/XSLT** , and full-stack development using **C# and Java** . This role will focus on... 

Kaleidoscope - ABA

Board Certified Behavior Analyst (BCBA) Job at Kaleidoscope - ABA

 ...Date Posted: 06/30/2025 Category: Center Based Education: Master's Degree Up to $6000 incentive available! We are seeking a BCBA to join our growing and successful team here at Kaleidoscope ABA. Competitive pay and flexibility offered. Key Benefits and... 

Sanford Health

HCA's needed for weekend care Job at Sanford Health

 ...healing across our broad footprint. Facility: East Patient Building Location: Sioux Falls, SD Address: 1305 W 18...  ...pm and 7pm - 7:30am Job Summary The Patient Care Technician (PCT) serves as caregiver to the patient during the scheduled...