Penetration Tester

Description

The company provides IT services and solutions to the Federal Government, supplying people, skills, clearance levels and technologies to organizations that want better performance and lasting change. It has served more than 30 Federal agencies and several commercial customers across the country.

The company is hiring a Penetration Tester to work on-site for a government contract with a client in Woodlawn, MD. An active Public Trust clearance is required.

Responsibilities

• You will test web applications, networks and IT infrastructure for weaknesses using penetration testing.
• You will run vulnerability assessments to find possible security risks and gaps.
• You will confirm and record security flaws and the attack paths they could enable.
• You will assess existing security controls and point out where they can be strengthened.
• You will write reports covering security findings, their risks and the fixes you recommend.
• You will work with technical and security staff to explain results and help get fixes in place.

Requirements

• An active Public Trust security clearance.
• A Bachelor's degree.
• Hands-on experience performing web application penetration testing.
• Experience testing networks and infrastructure for penetration.
• Experience running vulnerability assessments and finding security weaknesses.
• A solid grasp of penetration testing methods and security best practices.
• OSCP (Offensive Security Certified Professional) certification.

Conditions

Full-time, on-site in Woodlawn, MD.

Salary range of $120,000 to $135,000 USD.

The pay range is a general guide, not a guaranteed salary. The final offer depends on factors such as the role's responsibilities, education, experience, skills, internal equity, location, market data, any applicable bargaining agreement, or other law.

The company is a Federal subcontractor and follows federal laws against employment discrimination, including Title VII and the ADA, as well as VEVRAA's affirmative action rules for protected veterans.

Benefits

• Preferred, not required: experience supporting Red Team operations.
• Preferred, not required: familiarity with Command and Control (C2) frameworks.
• Preferred, not required: experience creating or developing malware for authorized security testing.
• The company participates in the Virginia Values Veterans (V3) program and supports the Military Medics and Corpsmen (MMAC) initiative, welcoming veterans, transitioning service members, military spouses and dependents.
• The company has grown for more than 15 years and appeared on the Inc. 5000 Fastest-Growing Private Companies list in 2012, 2016, 2017, 2018, 2019, 2020 and 2021.
• A competitive compensation package.