Senior Penetration Tester

Role Overview: In this position, you will conduct hands-on penetration testing of systems and applications and lead assessment planning and execution. The role also includes mentoring a small team of junior penetration testers, running Purple Team exercises with customer sites, and contributing to secure systems operations, validation, and accreditation work. Location and Schedule Hybrid: Washington, DC (3 days per week onsite)Compensation

Salary: USD 155,355 - 264,133 per year

Key Responsibilities: Lead and perform advanced security assessments, including hands-on penetration testing of systems and applications. Identify vulnerabilities, evaluate risk, and provide clear, actionable remediation recommendations. Develop and maintain assessment plans aligned with NIST SP 800-53 and FedRAMP Cloud Security Controls. Execute security assessments according to defined plans and document findings accurately and promptly. Design, develop, and maintain tools and scripts to automate and enhance penetration testing activities. Manage and mentor a small team of junior penetration testers, providing technical guidance and training. Build and lead a Purple Team to support joint red/blue team exercises with customer sites. Support secure systems operations and maintenance, including security validation and accreditation activities. Analyze and mitigate system security threats across the lifecycle, including risk assessments and implementation of security engineering controls. Support compliance needs related to business continuity, operations security, insider threat detection, physical security analysis, and regulatory requirements. Communicate technical results effectively to technical teams and executive stakeholders.

Education: Bachelor’s degree in a related field.

Experience: 8+ years of relevant experience in cybersecurity and penetration testing (or an equivalent combination of education and experience). Clearance: Active DOE Q-Clearance or Top Secret (TS) equivalent required.

Preferred Certifications: OSCP (Offensive Security Certified Professional) OSCE (Offensive Security Certified Expert) CEH (Certified Ethical Hacker) CISSP (Certified Information Systems Security Professional)Technologies and ToolsNIST SP 800-53 FedRAMP Cloud Security Controls Linux Tenable Nessus Forescout Carbon Black Invicti Scythe Rubrik Fidelis

Benefits: Health care, dental, vision Life insurance 401(k) Education assistance PTO, holidays, and any other paid leave required by law