TestPros, Inc.

Engineer

• Perform independent Verification and Validation (V&V) tasks as defined in IEEE 1012-2004 SIL 4, including reviews, analyses, evaluations, and tests.
• Conduct independent reviews of all software life-cycle artifacts—requirements, design, source code, test documentation, and associated verification records.
• Execute independent verification and validation testing, ensuring compliance with SIL 4 standards and independence requirements.
• Review Assembly-language source code (Intel ASM86) to confirm it accurately and completely implements approved requirements and design.
• Document findings, non-conformances, and recommendations per IEEE 1012-2004 documentation standards.
• Prepare evaluation reports and final certification recommendations, coordinating remotely with the client’s engineering staff as needed.
• If required, perform limited on-site functional testing on HSIM hardware located in Dallas, TX.

Senior IV&V Engineer – Part-time

QA Engineer

• Plan and execute external/internal penetration tests on Noridian systems
• Conduct vulnerability assessments across ~200 internal devices and multiple domains
• Perform web app/portal penetration tests per NIST SP 800-115
• Lead physical penetration testing onsite in Fargo
• Document findings, provide remediation recommendations, and support retesting

Lead Penetration Tester

Learning and Development

• Ensure websites and mobile applications comply with WCAG 2.1 Level AA standards
• Provide customized training sessions to staff on accessibility best practices
• Develop training materials focused on maintaining ongoing compliance with WCAG 2.1 standards
• Educate staff on the implications of the DOJ's 2024 rule for digital accessibility
• Improve digital accessibility for individuals with disabilities and align digital platforms with federal accessibility requirements
• Work as a part-time contractor supporting TestPros clients

Accessibility Training Specialist

• Conduct complete penetration tests, report on results, and provide improvement recommendations
• Ensure customer satisfaction through the delivery of high-quality consulting services across a portfolio of commercial and federal government projects
• Ability to elicit and understand customer requirements and covert those requirements into a technical services solution
• Ability to accurately estimate time and cost for each project
• Foster an environment of continuous learning, innovation and excellence
• Work closely with development teams, product managers, and customer success teams to ensure successful delivery of consulting services or product implementation projects and remove roadblocks
• Develop, review and approve formal statements of work, change requests, and proposals
• Formulate timely reports and documentation to track progress
• Effectively collaborate with peers and company leadership to accomplish team, corporate and client objectives
• Answer developer, designer, and content contributor questions about IT Security requirements.

Penetration Tester - Part Time

Consultant

• Perform complete audits and validation testing on cell phones.
• Write detailed findings to document identified issues and recommend potential solutions and best practices for remediation of accessibility violations.
• Apply software fixes and/or additional accessibility features within the target software source code.
• Develop and deliver informative and useful high quality outreach/educational presentations.
• Prepare and conduct training on accessibility related topics.

IT Accessibility Assessment Consultant - Part Time and Remote

Security Engineer

• Develop NIST 800-53 Rev5 based System Security Plan (SSP).
• Create/Update the applicable documents identified by NIST 800-53 Rev 5, specifically the Security Assessment Report (SAR).
• Create/Update the associated Plan of Actions and Milestones (POA&M).
• Provide detailed security-related reports including data, analyses, and conclusions upon completion of tests, scans, and assessments, including mitigations and, if indicated, appropriate escalation of identified risks and vulnerabilities.
• Verify and document the implementation of security controls necessary to achieve compliance.
• Keep management apprised of impending areas of concern, verbally and in writing.
• Review and develop System Security Plans (SSPs), Plans of Actions and Milestones (POA&Ms), and as well as other necessary artifacts.
• Facilitate the Plan of Actions and Milestones (POA&M) program to ensure customer systems have accurately and fully provided information for POA&M activities to include valid remediation of findings.
• Develop various policy documents (SOPs/CONOPs) as required.
• This may include policies regarding Configuration Management, IS Sanitization, Media Security, Password Policy, Business Continuity, Continuity of Operations, Incident Response, Disaster Recover, and Security Assessments.
• Develop new, and mature existing information security and risk policies.
• Initiate, and lead on-going information security maturity assessment processes and training, using industry accepted frameworks and implement into the overall cyber security posture.
• Produce and review key performance indicators for implemented security measures and distribute KPIs.
• Maintain knowledge of threat landscape by monitoring threat intelligence, and other related sources.

Security Controls Assessor - Part time & Remote

Compliance

• Re-assess websites and mobile applications post-remediation to confirm WCAG 2.1 compliance
• Conduct certification or validation processes for accessibility standards
• Deliver final compliance reports, documenting validation results

Compliance Validation Specialist - Part Time

• Leading end-to-end internal assessments based on PCI DSS requirements
• Managing team communications and visibility into status of deliverables
• Obtaining ISA certification within 12 months (if not current)
• Conducting internal assessments in partnership with information security officers, application owners, and service owners with PCI-DSS compliance tasks such as evidence preparation, evidence gathering and review, aligned to the PCI-DSS requirements
• Prepare reports and evidence packages for PCI-DSS assessment and compliance
• Collaborate with client teams to drive remediation and continuous improvement

PCI Compliance Consultant - Part time & Remote

• Conduct Penetration Testing: Perform comprehensive penetration tests on applications, networks, and systems to identify security vulnerabilities. Utilize industry-standard tools and methodologies to assess security controls and compliance.
• Reporting: Prepare detailed reports documenting findings, vulnerabilities, and recommendations for remediation. Present findings to stakeholders, highlighting risks and suggested improvements.
• Collaboration and Technical Assistance: Work closely with HHS OIG staff to provide technical assistance and training on identified vulnerabilities and security best practices. Collaborate with project teams to ensure findings are addressed and improvements are implemented.
• Continuous Learning: Stay current with emerging threats, vulnerabilities, and industry best practices to enhance penetration testing techniques.