TestPros, Inc.

QA Engineer

• Conduct Penetration Testing: Perform comprehensive penetration tests on applications, networks, and systems to identify security vulnerabilities. Utilize industry-standard tools and methodologies to assess security controls and compliance.
• Reporting: Prepare detailed reports documenting findings, vulnerabilities, and recommendations for remediation. Present findings to stakeholders, highlighting risks and suggested improvements.
• Collaboration and Technical Assistance: Work closely with HHS OIG staff to provide technical assistance and training on identified vulnerabilities and security best practices. Collaborate with project teams to ensure findings are addressed and improvements are implemented.
• Continuous Learning: Stay current with emerging threats, vulnerabilities, and industry best practices to enhance penetration testing techniques.

Penetration Tester - Part time & Remote

Compliance

• Leading end-to-end internal assessments based on PCI DSS requirements
• Managing team communications and visibility into status of deliverables
• Obtaining ISA certification within 12 months (if not current)
• Conducting internal assessments in partnership with information security officers, application owners, and service owners with PCI-DSS compliance tasks such as evidence preparation, evidence gathering and review, aligned to the PCI-DSS requirements
• Prepare reports and evidence packages for PCI-DSS assessment and compliance
• Collaborate with client teams to drive remediation and continuous improvement

PCI Compliance Consultant - Part time & Remote

• Re-assess websites and mobile applications post-remediation to confirm WCAG 2.1 compliance
• Conduct certification or validation processes for accessibility standards
• Deliver final compliance reports, documenting validation results

Compliance Validation Specialist - Part Time

Security Engineer

• Develop NIST 800-53 Rev5 based System Security Plan (SSP).
• Create/Update the applicable documents identified by NIST 800-53 Rev 5, specifically the Security Assessment Report (SAR).
• Create/Update the associated Plan of Actions and Milestones (POA&M).
• Provide detailed security-related reports including data, analyses, and conclusions upon completion of tests, scans, and assessments, including mitigations and, if indicated, appropriate escalation of identified risks and vulnerabilities.
• Verify and document the implementation of security controls necessary to achieve compliance.
• Keep management apprised of impending areas of concern, verbally and in writing.
• Review and develop System Security Plans (SSPs), Plans of Actions and Milestones (POA&Ms), and as well as other necessary artifacts.
• Facilitate the Plan of Actions and Milestones (POA&M) program to ensure customer systems have accurately and fully provided information for POA&M activities to include valid remediation of findings.
• Develop various policy documents (SOPs/CONOPs) as required.
• This may include policies regarding Configuration Management, IS Sanitization, Media Security, Password Policy, Business Continuity, Continuity of Operations, Incident Response, Disaster Recover, and Security Assessments.
• Develop new, and mature existing information security and risk policies.
• Initiate, and lead on-going information security maturity assessment processes and training, using industry accepted frameworks and implement into the overall cyber security posture.
• Produce and review key performance indicators for implemented security measures and distribute KPIs.
• Maintain knowledge of threat landscape by monitoring threat intelligence, and other related sources.

Security Controls Assessor - Part time & Remote

Consultant

• Perform complete audits and validation testing on cell phones.
• Write detailed findings to document identified issues and recommend potential solutions and best practices for remediation of accessibility violations.
• Apply software fixes and/or additional accessibility features within the target software source code.
• Develop and deliver informative and useful high quality outreach/educational presentations.
• Prepare and conduct training on accessibility related topics.

IT Accessibility Assessment Consultant - Part Time and Remote

• Conduct complete penetration tests, report on results, and provide improvement recommendations
• Ensure customer satisfaction through the delivery of high-quality consulting services across a portfolio of commercial and federal government projects
• Ability to elicit and understand customer requirements and covert those requirements into a technical services solution
• Ability to accurately estimate time and cost for each project
• Foster an environment of continuous learning, innovation and excellence
• Work closely with development teams, product managers, and customer success teams to ensure successful delivery of consulting services or product implementation projects and remove roadblocks
• Develop, review and approve formal statements of work, change requests, and proposals
• Formulate timely reports and documentation to track progress
• Effectively collaborate with peers and company leadership to accomplish team, corporate and client objectives
• Answer developer, designer, and content contributor questions about IT Security requirements.

Penetration Tester - Part time & Remote

PCI Compliance Consultant - Part time & Remote

Compliance Validation Specialist - Part Time

Security Controls Assessor - Part time & Remote

IT Accessibility Assessment Consultant - Part Time and Remote

Penetration Tester - Part Time