Role Description Cyber Defense Technologies (CDT) is seeking a Junior Penetration Tester to support cybersecurity operations across multiple enterprise and government environments. The selected candidate will assist senior penetration testers and security engineers in identifying vulnerabilities across networks, systems, and applications through authorized penetration testing and vulnerability assessment activities. This role provides an opportunity to work alongside experienced cybersecurity professionals performing offensive security assessments, vulnerability validation, and adversary emulation activities. The Junior Penetration Tester will participate in engagements that help organizations strengthen their security posture by identifying exploitable weaknesses and providing actionable remediation recommendations. The ideal candidate is passionate about cybersecurity, eager to learn advanced penetration testing techniques, and comfortable working in both Linux and Windows environments while leveraging industry-standard tools and frameworks. Qualifications - 0–2 years of cybersecurity or IT security experience related to vulnerability assessment, security operations, or penetration testing - Foundational knowledge of penetration testing methodologies and attack techniques - Experience working in Linux environments (Kali Linux, Ubuntu, or similar distributions) - Familiarity with Windows environments and Active Directory fundamentals - Understanding of network protocols (TCP/IP, DNS, HTTP, SMB, LDAP) - Basic scripting ability using Python, Bash, or PowerShell - Familiarity with common security testing tools such as: - Nmap - Burp Suite Community or Professional - Metasploit Framework - Wireshark - Nessus / OpenVAS - SQLmap - Nikto / OWASP Zap - Hydra - Gobuster / Dirbuster - BloodHound - Basic understanding of web application vulnerabilities such as SQL Injection, XSS, authentication bypass, and misconfigurations - Strong written communication skills for technical documentation and report writing Requirements - Assist senior penetration testers with internal and external penetration testing engagements against enterprise systems and networks - Conduct web application penetration testing using industry-standard tools and methodologies - Perform vulnerability identification, validation, and risk analysis to determine exploitability and impact - Support network reconnaissance, enumeration, and exploitation activities during authorized testing engagements - Assist in conducting wireless security assessments and password security testing - Document testing procedures, findings, and remediation recommendations for inclusion in professional penetration testing reports - Utilize tools such as Nmap, Burp Suite, Metasploit, Nessus, and Wireshark during testing activities - Participate in security research and exploit development labs to improve testing methodologies - Assist with post-exploitation analysis and privilege escalation testing - Support incident response investigations when malicious activity or compromise is suspected - Maintain familiarity with common attack frameworks such as MITRE ATT&CK, OWASP Top 10, and PTES - Collaborate with security engineers and system administrators to validate remediation efforts and conduct retesting Preferred Qualifications - Candidates possessing or actively pursuing one or more of the following entry-level penetration testing or cybersecurity certifications are strongly encouraged to apply: - TCM Security - PNPT – Practical Network Penetration Tester - PJPT – Practical Junior Penetration Tester - PWPT – Practical Web Penetration Tester - INE / eLearnSecurity - eJPT – eLearnSecurity Junior Penetration Tester - eWPT – eLearnSecurity Web Application Penetration Tester - CompTIA - Security+ - PenTest+ - CySA+ Desired Skills - Experience participating in Capture-the-Flag (CTF) competitions or security labs (TryHackMe, HackTheBox, PortSwigger Labs, etc.) - Familiarity with Active Directory attack fundamentals - Experience using Kali Linux penetration testing toolsets - Understanding of basic privilege escalation techniques on Linux and Windows systems - Experience working in team-based cybersecurity environments Work Environment - Remote or hybrid work environment depending on program requirements - Collaboration with CDT security engineers, red team members, and incident response personnel - Opportunity to participate in advanced penetration testing engagements and cyber research initiatives Benefits - Competitive salary based on experience - Comprehensive benefits package, including health, dental, and retirement plans - Opportunities for professional development and career advancement Company Description CDT is committed to hiring and retaining a diverse workforce. We are an Equal Opportunity employer making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. Apply Now If you are a proactive Penetration Tester and thrive in dynamic environments, we encourage you to apply and join the CDT team!

• Provides advanced analysis of systems from a security perspective, and ensures systems are designed with appropriate security requirements "baked-in", and that these systems maintain proper security postures throughout their life cycle. • Maintains a thorough understanding of risk management frameworks, including the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), and NIST Cybersecurity Framework (CSF). • Moves fluidly between nuts-and-bolts, tactical security implementations, to high-level strategic policy, standards, and guidelines that facilitate effective security operations. • Develops and maintains an in-depth knowledge of governing Defense, Federal, and Industry security regulations, standards, and best practices, including those defined in NIST 800-53, DISA Security Technical Implementation Guides (STIGs), Center for Internet Security (CIS), and vender security best practices.

Role Description This role exists to protect our sportsbook ecosystem from financial leaks and sophisticated fraud. You’ll help us maintain platform integrity and profitability by analyzing real-time betting data, neutralizing risks, and catching vulnerabilities before they scale. What you’ll drive: - Real-Time Detection & Monitoring: - Validate live and pre-match sports betting activity using Fairplay Monitor and internal alert systems. - Detect and intercept suspicious betting patterns, including arbitrage, value exploitation, latency abuse, and abnormal winnings. - Analyze player behavior across multiple accounts to uncover organized fraud rings and bonus abuse. - Risk Decisions & Execution: - Apply immediate risk mitigation actions, independently triggering account segmentation, betting limits, and market restrictions. - Drive verification requests for suspicious accounts to strictly validate player identities and block bad actors. - Resolve complex customer cases and internal JSM tickets related to fraud suspicions without compromising operational SLAs. - Cross-team Collaboration & Process Improvement: - Partner with Trading, Payments, Risk, and Integrity teams to conduct deep-dive investigations into betting anomalies. - Document audit-ready case notes and maintain accurate internal tracking tables for all antifraud actions. - Optimize our workflows by reporting bugs, clarifying rule logic, and suggesting improvements to our detection systems. Qualifications - 1+ year of hands-on experience in sports betting operations, fraud detection, or risk monitoring. - Strong understanding of sports betting mechanics, odds logic, and common fraud schemes (e.g., arbitrage, value betting). - Proven ability to make fast, autonomous decisions under time pressure with high operational accuracy. - Readiness to work in a 24/7 environment on a structured 4/2 rotating shift schedule (morning, evening, and night shifts). - Intermediate (B1+) English level to communicate clearly with cross-functional teams and maintain documentation. Requirements - Experience working with BI tools (like Tableau) or handling large operational datasets. - Familiarity with alert-based fraud detection systems (e.g., Fairplay Monitor). - Basic understanding of SQL for independent data validation. Benefits - Benefits Cafeteria — annual budget you allocate to: - Sports - Medical - Mental health - Home office - Languages - Paid maternity/paternity leave + monthly childcare allowance. - 20+ vacation days, unlimited sick leave, emergency time off. - Remote-first + tech support + coworking compensation. - Team events (online/offline/offsite). - Learning culture with internal courses + growth programs. Company Description GR8 Tech builds B2B iGaming platforms for operators who play to lead. We deliver full-cycle, high-impact tech designed to scale — from seamless integrations and expert consulting to long-term operational support. Our platform powers millions of active players and drives real business growth. Call it what it is: the iGaming Platform for Champions. With 1000+ GR8 people across locations and time zones, we don’t just ship technology — we help operators build success stories across brands, markets, and geos. Our ambition drives us. Our people make it real.

Role Description Peraton is seeking an Information Systems Security Officer (ISSO) to join our team. The Information System Security Officer (ISSO) is part of the PERATON DHS’ Security team and plays a Cybersecurity operational compliance role within the Citizen Security and Public Services Sector (CS&PS). The position is responsible for performing as a named ISSO for a Government System and assisting other ISSOs with end-to-end Governance Risk and Compliance (GRC) functions that entails security control implementation, continuous monitoring, and federal Assessment and Authorization (A&A) activities. Day to Day Work Responsibilities: - Works closely under the supervision of Cybersecurity Manager and with other security personnel within Peraton CS&PS Sector to ensure operational security measures are implemented. - Assesses and mitigates system security risks; determines and analyzes security requirements for implementation and testing. - Reviews and continuously monitors implemented security controls. - Creates and maintains security checklists, templates, and other tools to aid in the A&A process. - Performs security control assessment using Agency guidelines/NIST guidance and as per continuous monitoring requirements. - Performs risk analyses to determine and recommend essential safeguards. - Proactively reviews Vulnerability Scans (Nessus, ACAS, We-App, etc.) and recommends compensating controls. - Prepares supporting materials for the security authorization package in accordance with the client contractual requirements. - Develops core documents such as System Security Plan, Contingency Plan, Incident Response Plan, Standard Operating Procedures, Plan of Actions and Milestones, Remediation Plans, Configuration Management Plan, etc. - Maintains client-specific Plan of Action and Milestones (POA&Ms) and supports remediation activities using Information Assurance (IA) and Risk Management tools such as CSAM, eMASS, etc. - Maintains an inventory of hardware and software for the information system. - Develops, tests and trains on Contingency and Incident Response planning. - Experience working with the National Institute of Standards and Technology (NIST) and Federal Information Security Management Act (FISMA) requirements and reporting. - Experience in managing security Assessment and Authorization activities utilizing common control frameworks. - Experience with risk mitigation and selecting or designing appropriate security controls for implementation. - Experience applying cloud security concepts, requirements, design development, implementation, and integration for existing and new technology product offerings. - Experience with performing security risk and compliance activities in FedRAMP cloud-enabled environment (e.g., Microsoft Azure, Amazon AWS). - Experience in coordinating, monitoring and tracking security activities across multiple organizations. - Experience in managing security posture of General Support Systems (GSS) and Major Application system(s), working with engineering/Operation teams to remediate, and communicating system-level risks to the stakeholders. The ISSO operates as a trusted advisor in the organization, working with senior management and helps to understand operational issues and plans the next steps in collaboration with Cybersecurity Manager from an information security viewpoint. The candidate will be able to demonstrate industry expertise and thorough understanding of security governance, risk and compliance domain. This position requires the ability to interact and influence at an organizational level to carry out governance, risk and compliance activities. Qualifications - US Citizenship required - Must be able to pass US Government Clearance processes – DHS Public Trust with EOD and Secret or higher clearance - Bachelor’s degree in a technical field and 12 years experience or high school diploma/equivalent and 16 years experience - Good understanding of computer network security technologies used in the industry and related security configurations (e.g., DISA STIGs, CIS Benchmarks and settings) - Knowledge of the security countermeasures and overall RMF and NIST compliance guidelines - Must have the ability to influence system stakeholders in the execution of security and compliance requirements Requirements - Experience with industrial, contract, personnel security and security training - Excellent communication skills - Ability to work effectively in diverse, multi-national and virtual environments - Self-motivated and tenacious and demonstrates sound judgment and integrity - Experience of working with Federal Information Processing (FIPS), FISMA, FedRAMP and other Cyber Security related laws, regulations and directives - Experience of presenting at client meetings - Experience of translating contractual security requirements to deliverables - Knowledge of Federal Government Security, industry and market trends and CS&PS business and offerings - Understands federal security and regulations and DHS’ Security Policy and has in-depth knowledge of DHS’ Security Policy 4300a Company Description Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Target Salary Range $112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. EEO EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.