Information Security Analyst

About Cook Systems

For over 30 years, Cook Systems has partnered with organizations across the country to solve technology challenges and build strong technology teams. As a veteran-owned IT consulting company, we combine decades of industry experience with a continued focus on how technology, AI, and the way people work are evolving.

Our work spans technology consulting, talent development, and AI-enabled solutions. We value people who take ownership, adapt quickly, communicate well, and care about the quality of their work. Whether you’re early in your career or bringing years of experience, you’ll have the opportunity to keep building your skills, contribute to meaningful client work, and grow with a company that continues to evolve with the industry.

Summary: We are seeking an experienced Penetration Tester to support the automation and scaling of our Bug Bounty program. The selected candidate will be responsible for validating and triaging findings, ingesting confirmed issues into our enterprise ticketing system, and helping to establish processes that enable AI-driven validation and prioritization of findings.

Responsibilities:

• Conduct web application and infrastructure penetration testing.
• Validate and reproduce bug bounty submissions, identifying false positives and duplicate findings.
• Triaging and contextualizing security findings using industry-standard frameworks such as CVSS, DREAD, or similar methodologies.
• Partner with developers to remediate vulnerabilities and provide secure coding guidance.
• Ingest confirmed issues into our enterprise ticketing system.
• Establish processes for AI-driven validation and prioritization of findings.
• Leverage scripting, automation, APIs, or AI-assisted workflows for process efficiency.

Required Qualifications:

• Web application and infrastructure penetration testing experience.
• Experience triaging and contextualizing security findings using industry-standard frameworks such as CVSS, DREAD, or similar methodologies.
• Experience partnering with developers to remediate vulnerabilities and provide secure coding guidance.
• Experience validating and reproducing bug bounty submissions, including identifying false positives and duplicate findings.
• Familiarity with vulnerability management and ticketing platforms (ServiceNow, Jira, Azure DevOps, or similar).
• Experience leveraging scripting, automation, APIs, or AI-assisted workflows (Python, PowerShell, LLM-based tooling, etc.).
• Certifications such as GPEN, OSCP, PenTest+, or equivalent industry-recognized credentials.

Benefits at Cook Systems