Penetration Testing Engineer IV

Responsibilities

- Conduct comprehensive penetration testing of Mobile ID applications (Android and iOS)
- Perform security assessments of Digital Identity Wallet and Civil Identity backend systems and APIs
- Test cloud infrastructure security controls across AWS environments
- Evaluate biometric authentication systems and liveness detection mechanisms
- Assess PKI implementation, SOC 2, X.509 certificate management, and cryptographic controls
- Conduct network penetration testing of government integration points and DMV connections
- Perform social engineering assessments targeting identity verification processes
- Test mobile SDK security implementations and third-party integrations
- Evaluate web application security for citizen enrollment portals
- Assess compliance with government security frameworks (NIST, FedRAMP, FISMA)
- Develop detailed vulnerability reports with risk ratings and remediation guidance
- Collab...