Internal Network Penetration Tester

Position Summary

Executes internal network penetration testing from two pre-determined footholds — an unauthenticated physical network port and a simulated-phishing authenticated workstation — across County facilities, testing servers, workstations, endpoints, and password strength.

Key Responsibilities

• Physically connect to County network ports to simulate an unauthenticated internal attacker.

• Simulate a successful phishing/Trojan compromise from an authenticated workstation foothold.

• Attempt password cracking and lateral movement while evading department detection and response efforts.

• Document internal attack paths, exploited vulnerabilities, and business impact for each department report.