[Hiring] Ethical Hacker / Penetration Tester @MSU Federal Credit Union

Role Description

This role is essential for safeguarding the Credit Union's digital assets by performing comprehensive security assessments, including:

• Network penetration tests
• Web and mobile application evaluations
• Phishing tests

The role identifies and addresses security vulnerabilities, ensuring compliance with industry best practices and internal policies, thereby preventing system compromise and protecting sensitive information. Additionally, the role promotes a culture of security awareness and supports strategic initiatives to enhance the Credit Union's cybersecurity posture, ultimately building trust and confidence among members.

Work Arrangement

This position is a fully remote role within the state of Michigan or Illinois.

Schedule

• Monday - Friday 8:30am - 5:00pm ET

Compensation & Benefits

• 100% Company-Paid Health, Dental, Vision, Life, and Long-Term Disability Premiums
• Up to 26 days of PTO within your first year, as well as Volunteer Time Off & 11 Paid Holidays
• 401(k) with a company match
• Tuition Reimbursement
• Up to 12 Weeks of Paid Parental Leave

Essential Duties and Responsibilities

Ethical Hacker I:

• Perform network penetration tests, web application security assessments, mobile application security assessments, wireless network assessments, red team assessments and phishing tests for the Credit Union within scheduled time frames following industry best practice methodologies.
• Identify, develop, and document security issues and recommendations using independent judgment concerning areas being reviewed.
• Communicate results, suggestions, and/or findings via written reports and oral presentations to Credit Union management, the President/CEO and the Board of Directors.
• Conduct security assessments of third-party applications utilized by the Credit Union within scheduled time frames.
• Stay updated with the latest cybersecurity trends, tools, and techniques to continuously improve testing methodologies and security practices.
• Assist with the coordination and performance of all contracted penetration testing projects and services conducted by third-party vendors.
• Evaluate the Credit Union’s risk areas and provide key input to the development of the annual penetration testing plan.
• Promote a culture of security awareness within the organization through administration of phishing simulation and other best practice and emerging threat training sessions.
• Understand the Credit Union's policies and procedures to ensure compliance and accountability for managing operational risks. Adhere to established internal controls and procedures to safeguard assets, prevent fraud, and maintain the integrity of credit union operations.
• Perform other duties as assigned.

Sr. Ethical Hacker:

• Develop, implement, and refine advanced penetration testing techniques to identify vulnerabilities in our systems.
• Apply ethical hacking tools in an innovative and comprehensive manner to increase the Credit Union’s cybersecurity posture.
• Support the Credit Union strategic direction and initiatives while helping others understand the purpose of decisions and direction.
• Proactively seek out and identify new areas of potential risk and opportunities for security improvements.
• Serve as a recognized subject matter expert across the Credit Union and contribute security and control insights on strategic and innovative projects.

Job Requirements

Ethical Hacker I:

• High School Diploma or equivalent required.
• This position requires a Bachelor’s degree or equivalent experience in computer science, information technology, or related field.
• Prior experience in penetration testing, vulnerability assessments, or related security testing activities is required.
• GIAC GPEN, GIAC GWAPT, or pursuit of similar designation is preferred.

Sr. Ethical Hacker:

• Prior experience leading a program or independently managing offensive security operations in professional penetration testing and/or vulnerability assessment.
• GIAC GPEN, GIAC GWAPT, or pursuit of similar designation is required.

Competencies

• Core Competencies: Communicate, Navigate Change & Evolve, Solve Problems & Make Decisions, Plan, Prioritize, and Achieve, and Collaborate.
• Functional Competencies:
  • Digital Literacy - Adopts, effectively uses, and champions new technology.
  • Time Management - Manages time and resources to ensure that work is completed efficiently.
  • Critical Thinking - Takes outside knowledge into account while evaluating information.
  • Initiative - Takes proactive and prompt action to accomplish work goals.
  • Knowledge Sharing - Uses formal, informal, and systematic methods to impart information onto others.
  • Organization - Arranges work in a systematic way either on small or large scales.
  • System Knowledge - Demonstrates knowledge of specific Credit Union programs and applications.
  • Detail Oriented - Ensures information is complete and accurate.
  • Resourcefulness - Creatively copes with difficult situations or unusual problems.
  • Process Improvement - Spots processes that need improving and can implement those changes.

Physical Demands and Work Environment

• May be required to remain in a stationary position for an extended period.
• Ability to operate standard office technology, equipment, and tools, which may include many hours of computer and phone usage.
• Occasionally needs to move about inside of an office area.
• Exposure to potentially hazardous conditions, i.e. robbery.
• This position can work in hybrid or remote working arrangements.

Disclaimer

Please note this job description is not intended to be construed as an exhaustive list of all functions, responsibilities, skills, and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate. This document does not represent a contract of employment, and MSU Federal Credit Union reserves the right to change this position description and/or assign tasks for the employee to perform, as MSUFCU may deem appropriate.

MSUFCU is an affirmative-action, equal-opportunity employer.

To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions.