Job Description

The Penetration Tester will conduct comprehensive penetration tests on applications, networks, and systems. Identify and exploit security vulnerabilities to assess risk, developing detailed reports on findings, and providing recommendations for remediation. Collaborate with other cybersecurity teams to improve the overall security posture and support incident response activities when necessary. Stay current with emerging threats and vulnerabilities to enhance testing techniques. Responsible for conducting security testing and vulnerability assessments. Perform various types of penetration tests, including network, web application, and social engineering assessments. Use both manual techniques and automated tools to identify vulnerabilities, and will assist in the development of remediation plans. Participate in the development and maintenance of penetration testing methodologies and tools. Contribute to the organization's threat intelligence efforts by sharing insights gained from penetration testing activities.

Must have:

• 8 years of experience conducting penetration tests and vulnerability assessments in large IT environments.
• Experience using automated/manual techniques and developing remediation plans
• Must meet DoD 8140 requirements
• Bachelor’s degree (or an additional 4 years of experience)

Security Clearance:

• Active TS/SCI clearance

Penetration Tester

Overview

We are seeking a Penetration Tester to design, coordinate, and execute a modern, scalable penetration‑testing program. This role will unify penetration‑testing activities across network, application, and cloud environments, ensuring consistent execution, standardized reporting, and alignment with enterprise security and risk‑management objectives.

The Pen Tester will also guide the integration of automated and AI‑assisted testing capabilities into the organization’s Agentic AI architecture, improving speed, accuracy, and repeatability of offensive security operations.

You Will:

Program Leadership & Governance

• Consolidate ad‑hoc penetration‑testing efforts into a unified enterprise pen‑testing program with standard methodologies, processes, and reporting.
• Establish and maintain Rules of Engagement (ROE) for all testing activities, defining scope, communication protocols, safety constraints, escalation paths, and evidence‑handling guidelines.
• Coordinate and supervise all test execution activities, including internal teams, contractors, and third‑party assessors.

Technical Execution & Delivery

• Plan and execute network, application, and cloud penetration tests under the approved ROE.
• Combine manual tradecraft with AI‑assisted offensive‑security tooling to increase depth and coverage of assessments.
• Produce detailed evidence packages, exploitation artifacts, and findings reports that support remediation and root‑cause analysis.
• Work with product teams, system owners, and DevSecOps/Cloud teams to validate findings and retest fixes.

Tooling & AI Integration

• Integrate penetration‑testing tools, automation frameworks, and exploit‑development workflows into the Agentic AI security architecture.
• Recommend tooling enhancements, AI‑driven analysis approaches, and automation opportunities.

Risk & Vulnerability Management

• Conduct technical risk assessments across systems to determine likelihood, impact, and exploitation feasibility.
• Analyze risk vectors to prioritize vulnerabilities and perform triage across multiple findings sources (manual, automated, AI‑assisted, third‑party).
• Partner with vulnerability‑management, SOC, threat‑intelligence, and engineering teams to drive remediation activities.

Here’s what you need:

• Two years of Penetration-Testing experience
• Hands‑on penetration‑testing experience across at least two of the following domains: network, cloud, web application, identity, or containerized environments.
• Experience operating within defined Rules of Engagement.
• Proficiency with common offensive‑security tools (e.g., Burp Suite, Cobalt Strike, Metasploit, BloodHound).
• Ability to produce high‑quality technical documentation, findings reports, and remediation guidance.

Nice to Haves:

• Experience developing custom exploits, automation scripts, or AI‑augmented testing workflows.
• Familiarity integrating tooling into agent‑based or Agentic AI architectures.
• Prior experience leading penetration‑testing teams or programs.
• Industry certifications such as OSCP, OSWE, OSEP, CRTO, GPEN, or equivalent.