Penetration Tester

For more details, please connect with Soumya Nayak at soumyan@vgroupinc.com or call at (919) 892-9711.

Job Title : Senior Penetration Tester / Security Architect

Duration : 2 Months

Location : Vermont --- Remote

Position Type : Contract

Hours Per Week : 40

Ceipal ID : SVT_PENE002_SN

End Client : State of Vermont – Agency of Digital Services (ADS) / Vermont Department of Labor (VDOL)

Department : Unemployment Insurance Modernization Project

Scope of Project

Lead and execute end-to-end penetration testing of the State of Vermont’s Unemployment Insurance system (FAST UI/EmployVT) across external web applications and endpoints, including black-box and authenticated role testing (three user roles). Deliver risk-ranked findings with proof-of-concepts, comprehensive packet logs, and support remediation and retesting cycles.

Responsibilities:

• Plan & scope engagement in coordination with ADS, VDOL, and FAST Enterprises.
• Perform external web application penetration testing against production-like environments.
• Conduct endpoint penetration testing and validate exploitability.
• Execute black-box testing to determine compromise potential.
• Perform authenticated penetration testing for three user roles.
• Log and trace every packet sent to EmployVT and prepare log-file deliverables.
• Prepare initial findings within 5 business days, draft reports within 10 business days, and final reports.
• Retest all remediated vulnerabilities and update reports accordingly.
• Ensure all testing and data handling remains within the continental United States.
• Provide attestation of destruction of all information obtained during testing.

Required/Preferred Skills:

• 7–10+ years hands-on penetration testing experience.
• Expertise in OWASP, web security, endpoint exploitation, and black-box methods.
• Strong experience producing detailed risk-ranked reports with reproduction steps and screenshots.
• Proficiency with packet capture, traffic analysis, and structured logging.
• US-based resource with ability to maintain all data in continental US.

V Group Inc. is a NJ-based IT Services and Products Company with its business strategically categorized in various Business Units including Public Sector, Enterprise Solutions, Professional Services, Ecommerce, Projects, and Products. Within Public Sector business unit, we cater IT Professional Services to Federal, State and Local. We have multiple awards/ contracts with 30+ states, including but not limited to NY, CA, FL, GA, MD, MI, NC, OH, OR, CO, CT, TN, PA, TX, VA, NM, VT, and WA.

If you are considering applying for a position with V Group, or in partnering with us on a position, please feel free to contact me for any questions you may have regarding our services and the advantages we can offer you as a consultant.

Please share my contact information with others working in Information Technology.

Website : https://www.vgroupinc.com/publicsector

LinkedIn : https://www.linkedin.com/company/v-group/

Facebook : https://www.facebook.com/VGroupIT

Twitter : https://www.twitter.com/vgroupinc