Information Security Analyst: Senior- Penetration Tester

Job description

### **About Cook Systems** For over 30 years, Cook Systems has partnered with organizations across the country to solve technology challenges and build strong technology teams. As a veteran-owned IT consulting company, we combine decades of industry experience with a continued focus on how technology, AI, and the way people work are evolving. Our work spans technology consulting, talent development, and AI-enabled solutions. We value people who take ownership, adapt quickly, communicate well, and care about the quality of their work. Whether you’re early in your career or bringing years of experience, you’ll have the opportunity to keep building your skills, contribute to meaningful client work, and grow with a company that continues to evolve with the industry. **Summary:** We are seeking an experienced Penetration Tester to support the automation and scaling of our Bug Bounty program. The selected candidate will be responsible for validating and triaging findings, ingesting confirmed issues into our enterprise ticketing system, and helping to establish processes that enable AI-driven validation and prioritization of findings. **Responsibilities:** - Conduct web application and infrastructure penetration testing. - Validate and reproduce bug bounty submissions, identifying false positives and duplicate findings. - Triaging and contextualizing security findings using industry-standard frameworks such as CVSS, DREAD, or similar methodologies. - Partner with developers to remediate vulnerabilities and provide secure coding guidance. - Ingest confirmed issues into our enterprise ticketing system. - Establish processes for AI-driven validation and prioritization of findings. - Leverage scripting, automation, APIs, or AI-assisted workflows for process efficiency. **Required Qualifications:** - Web application and infrastructure penetration testing experience. - Experience triaging and contextualizing security findings using industry-standard frameworks such as CVSS, DREAD, or similar methodologies. - Experience partnering with developers to remediate vulnerabilities and provide secure coding guidance. - Experience validating and reproducing bug bounty submissions, including identifying false positives and duplicate findings. - Familiarity with vulnerability management and ticketing platforms (ServiceNow, Jira, Azure DevOps, or similar). - Experience leveraging scripting, automation, APIs, or AI-assisted workflows (Python, PowerShell, LLM-based tooling, etc.). - Certifications such as GPEN, OSCP, PenTest+, or equivalent industry-recognized credentials. ### **Benefits at Cook Systems** We want our employees to have benefits that support their health, financial well-being, and life outside of work. Eligible Cook Systems employees have access to a comprehensive benefits package beginning the first of the month following their hire date, including: - Medical coverage through Blue Cross Blue Shield, with two plan options - Dental and vision coverage - Life, critical illness, and accident insurance through Unum - Flexible Spending Account and Dependent Care FSA options through Navia - Health Gap Insurance through Sun Life - 401(k) retirement plan through The Standard, with eligibility after six months Beyond benefits, Cook Systems is a place where we expect people to take ownership of their work, communicate openly, continue learning, and contribute to the teams and clients they support. We have been building technology careers and client partnerships for more than three decades, and we continue to evolve with the industry. If you’re looking for an opportunity to do meaningful work, develop your capabilities, and be part of what comes next in technology, we’d like to hear from you.