Penetration Tester

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Plan and carry out authorized penetration tests across various environments including network, endpoint, wireless, database, application, and infrastructure.

• Create and customize Rules of Engagement, Execution Plans, daily status updates, and final reporting inputs.

• Collaborate with system owners, SOC personnel, and other stakeholders to verify the scope, testing windows, prerequisites, safety thresholds, and stop/pause procedures.

• Assess vulnerabilities resulting from misconfigurations, outdated software, inadequate access controls, incomplete control implementations, and exploitable attack paths.

• Assist in the validation of CISA WAS, CISA FAST, KEV exposure, and findings related to external-facing assets.

• Organize retesting to ensure closure of identified issues.

• Utilize approved automated and AI-enabled tools to enhance reconnaissance, testing efficiency, ATT&CK/ATLAS mapping, evidence gathering, and reporting while ensuring human oversight is maintained.

• Mentor junior testing personnel.

• Independently lead assessments with minimal supervision.

⛳️ Requirements

• U.S. Citizenship or Permanent Residency is mandatory for this federal role.

• Approximately 5 to 8 years of experience in conducting or managing penetration testing engagements.

• Proven capability to plan and execute assessments across network, endpoint, wireless, database, application, and infrastructure environments.

• Experience in forming Rules of Engagement, Execution Plans, and formal, decision-ready reports for stakeholders.

• Experience in direct coordination with system owners and SOC personnel on scope, safety thresholds, and stop/pause procedures.

• Ability to work fully remotely with dependable and secure connectivity.

• Prior federal contracting experience is preferred.

• Familiarity with CISA WAS, CISA FAST, and KEV validation and retest workflows is preferred.

• Knowledge of MITRE ATT&CK and ATLAS mapping is preferred.

• Advanced certifications such as OSCP, OSCE, GPEN, or GXPN are preferred.

• Experience in integrating AI-enabled tools into testing workflows while maintaining human oversight of results is preferred.

🏝️ Benefits

• Medical coverage with multiple POS health plan options, including an HSA-compatible plan.

• Dental PPO coverage that includes preventive, basic, and major services.

• Vision coverage that encompasses an annual exam, frames, lenses, and a contact lens allowance.

• 401(k) plan with employer matching up to 5% of eligible compensation.

• Long-Term Disability insurance, with 100% employer-paid coverage at 50% of pre-disability earnings.

• Life Insurance and AD&D insurance, both with 100% employer-paid coverage valued at $10,000 each.

• Paid Time Off (PTO) ranging from 15 to 25 days annually, depending on tenure.

• Paid Federal Holidays, observing all 11 federal holidays.