Primary Responsibilities:

• Work as part of an Agile penetration testing team, empowered to execute objectives in a thorough and timely fashion
• Conduct vulnerability assessments on a wide variety of technologies and implementations utilizing both automated tools and manual techniques
• Network penetration tests
• Application penetration tests (web, mobile and thick client)
• API penetration tests
• Container Penetration tests
• Effectively communicate successes and obstacles with fellow team members and team lead(s)
• Create written reports, detailing assessment findings and recommendations
• Interface with customer contact(s) and staff in a constructive and professional manner
• Develop subject matter expertise in topics to include: containerization, automation, network, database, wireless and application security assessments
• Ethically operate with appreciable latitude in developing methodology and applying it in the field
• Research and analyze known hacker methodologies, system exploits, and vulnerabilities to support methodology development and execution
• Ability to communicate clearly and effectively through oral or written communication with all levels in the organization
• Ability to initiate, design, execute, and complete projects independently with minimal direction
• Proven ability to solve problems independently

Required Qualifications:

• 5+ years of experience in penetration testing
• Demonstrable technical experience with Web Application, Network Penetration Testing
• Experience with one or more assessment and exploitation tools including:
• Kali Linux
• Metasploit
• Burp Suite Pro
• NMAP
• Experience/Working knowledge of at least one programming or scripting language
• Candidates must be located near one of the office locations: Hartford, CT, Plymouth, MN, Raleigh, NC, and Boston, MA

Preferred Qualifications:

• Desired Certification in Information Security - OCSP, CISSP,CISM, CEH, GPEN, GWAPT
• An understanding of ethical hacking methodologies, application security testing, and industry resources, e.g. OWASP, OSSTMM, NIST publications, SANS/CWE.
• Experience with FISMA / PCI-DSS compliance, ISO 27000 / NIST SP 800 Frameworks
• Bachelor's degree or equivalent work experience
• Familiarity with web application concepts, including but not limited to JavaScript, XML, SOAP, REST and AJAX
• Agile experience in Scrum and/or Kanban

Technology Careers with Optum. Information and technology have amazing power to transform the health care industry and improve people's lives. This is where it's happening. This is where you'll help solve the problems that have never been solved. We're freeing information so it can be used safely and securely wherever it's needed. We're creating the very best ideas that can most easily be put into action to help our clients improve the quality of care and lower costs for millions. This is where the best and the brightest work together to make positive change a reality. This is the place to do your life's best work.(sm)

UnitedHealth Group is a drug-free workplace. Candidates are required to pass a drug test before beginning employment.

Job Keywords: IT Ethical Hacking, Penetration Test Analyst, Plymouth, MN, Minnesota, Hartford, CT, Connecticut, Raleigh, NC, North Carolina, Optum