PenTest Engineer
Remote with occasional travel to Bucks County, PA

We are seeking an experienced Penetration Tester to conduct a security assessment of a mobile medical application used for fetal point-of-care ultrasound. The application runs on a BYOD iPad, interfaces with an ultrasound probe via USB-C, communicates with a PACS over Wi-Fi, and authenticates users via LDAP. This engagement requires a tester who can scope and execute application-layer testing within clearly defined boundaries and produce documentation suitable for FDA software expectations.

Scope of Work

• Application security testing of the mobile medical app running on a BYOD iPad
• Testing of the app's handling of the USB-C connection to the ultrasound probe (probe hardware/firmware itself is out of scope)
• Testing of the app's communication with the PACS over Wi-Fi (PACS server and underlying Wi-Fi infrastructure are out of scope)
• Testing of the app's LDAP-based authentication flows (LDAP server itself is out of scope)
• Development of a test approach and report deliverables that satisfy FDA expectations for software

Required Qualifications

• BS in Computer Science, Electrical Engineering, or related technical field
• 5+ years of penetration testing experience, including pen testing of software applications
• Experience designing test approaches and deliverables that meet FDA expectations for medical device software
• Excellent customer-facing oral and written communication skills

Nice to Have

• Familiarity with the FDA 510(k) submission process
• Experience with Formal Software Process for Safety Critical Applications

Additional Notes

• Engagement boundaries are clearly defined: probe internals, PACS server/infrastructure, Wi-Fi network, and LDAP server are explicitly out of scope
• Final test methodology, remote/onsite requirements, and reporting format to be confirmed with client during scoping

Welcome to ConsultNet, a premier national provider of technology talent and solutions. Our expertise spans across project services, contract-to-hire, direct search, and managed services onshore, nearshore, and hybrid. For over 25 years, we have connected thousands of consultants with meaningful roles through a personal, communication-driven approach, partnering with a diverse client base to build high-performing teams and create lasting impact. Our comprehensive service offerings cover a wide range of technology and engineering positions across key markets nationwide. Learn more at www.consultnet.com .

We champion equality and inclusivity, proudly supporting an Equal Opportunity Employer policy. We welcome applicants regardless of Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other status protected by law.