Mid-Level Penetration Tester

This is a fully remote position, open to applicants in United States.

📋 Description

• Plan and implement authorized penetration tests across network, endpoint, wireless, database, application, and infrastructure environments.

• Adhere to structured phases of Planning, Discovery, Testing, and Reporting.

• Create and customize Rules of Engagement, Execution Plans, daily status reports, and final reporting contributions.

• Collaborate with system owners, SOC personnel, and other stakeholders regarding scope, testing windows, prerequisites, safety thresholds, and stop/pause procedures.

• Assess vulnerabilities stemming from misconfigurations, outdated software, weak access controls, incomplete control implementations, and exploitable attack vectors.

• Assist in validating CISA WAS, CISA FAST, KEV exposure, and findings related to external-facing assets.

• Oversee retesting to ensure closure of identified issues.

• Utilize approved automated and AI-enabled tools to enhance reconnaissance, testing efficiency, ATT&CK/ATLAS mapping, evidence development, and reporting, while ensuring human oversight is maintained.

• Mentor junior testing personnel.

• Independently conduct assessments with minimal supervision.

⛳️ Requirements

• U.S. Citizenship or Permanent Residency is required for this federal engagement.

• Approximately 5 to 8 years of experience in conducting or leading penetration testing engagements.

• Proven ability to plan and execute assessments across network, endpoint, wireless, database, application, and infrastructure environments.

• Experience in developing Rules of Engagement, Execution Plans, and formal, decision-ready reports for stakeholders.

• Experience coordinating directly with system owners and SOC personnel concerning scope, safety thresholds, and stop/pause procedures.

• Capability to work fully remotely with reliable, secure connectivity.

• Prior federal contracting experience is preferred.

• Familiarity with CISA WAS, CISA FAST, and KEV validation and retest workflows is preferred.

• Knowledge of MITRE ATT&CK and ATLAS mapping is preferred.

• Advanced certifications such as OSCP, OSCE, GPEN, or GXPN are preferred.

• Experience integrating AI-enabled tools into testing workflows while ensuring human oversight of results is preferred.

🏝️ Benefits

• Medical, with multiple POS health plan options including an HSA-compatible plan.

• Dental, providing PPO coverage for preventive, basic, and major services.

• Vision, covering annual exams, frames, lenses, and a contact lens allowance.

• 401(k) plan with employer matching up to 5% of eligible compensation.

• Long-Term Disability, with 100% employer-paid coverage at 50% of pre-disability earnings.

• Life Insurance and AD&D, with 100% employer-paid coverage valued at $10,000 each.

• 15 to 25 PTO days annually based on tenure.

• All 11 federal holidays are observed.