Lead Cybersecurity Penetration Tester

1 week ago


Arlington, Virginia, United States Peraton Full time
Position Overview

Peraton is in search of a seasoned Senior Cyber Penetration Tester to contribute to the Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program. This role focuses on delivering top-tier cyber and technology security expertise to facilitate innovative, efficient, and secure operational processes.

Work Location: Arlington, VA. Flexible for occasional remote work - candidates must be local to the work area.

Key Responsibilities:
  • Lead and conduct penetration tests as part of the Department of State Red Cell Team to evaluate the security posture of client systems.
  • Identify security weaknesses and propose remediation strategies to comply with mandated NIST security controls.
  • Communicate findings effectively to system owners and technical teams.
  • Oversee the maintenance of Red Cell infrastructure.
  • Create or enhance tools for automating vulnerability discovery and exploitation.
Qualifications

Required:
  • Bachelor's degree in a relevant field with 9 years of experience in Cyber/IT, or a Master's degree with 7 years of relevant experience. Alternatively, 4 years of additional IT security or penetration testing experience may substitute for a degree.
  • A minimum of 5 years of hands-on experience in penetration testing.
  • Possession of one of the following certifications, or the ability to obtain it before the start date:
    • CASP+ CE, CCNP Security, CEH, CFR, CHFI, CISA, CISSP (or Associate), Cloud+, CND, CySA+, GCED, GCIH, GICSP, or SSCP.
  • Proficient in using Kali Linux.
  • Experience with penetration testing tools such as Nmap, Burp Suite, Metasploit, etc.
  • Ability to assess vulnerabilities, conduct root cause analysis, and report findings using methodologies like NIST SP, PTES, ISSAF, OWASP WTG, etc.
  • Proven capability to lead penetration tests and mentor both Senior and Junior Penetration Testers.
  • U.S. citizenship with an active Secret security clearance.
    • Must be able to obtain a final Top Secret security clearance.
Preferred:
  • Possession of an Active Top Secret or TS/SCI clearance.
  • One of the following certifications or an equivalent, verifiable certification demonstrating IT security expertise:
    • CompTIA CASP+, ISC2 CISSP, ISC2 CCSP, ISC2 ISSEP.
  • One of the following certifications or an equivalent, verifiable certification demonstrating practical penetration testing skills:
    • OSCP, CPTS, PNPT, or GXPN.
  • Zero Point Security Red Team Ops II certification.
  • Advanced knowledge in the following areas:
    • NIST Risk Management Framework (RMF) and the Assessment and Authorization (A&A) process.
    • Core security principles including CIA, IAAAA, access control models, and risk management.
    • Networking concepts and technologies such as IP routing, TCP/UDP, VPNs, firewalls, and NAT.
    • Common network protocols including SSH, FTP, SMTP, SMB, and HTTP.
    • Operating system fundamentals including process management, device management, and file systems.
    • Data processing concepts such as encoding, hashing, and encryption.
    • Familiarity with scripting and programming languages like Bash, Python, PowerShell, and JavaScript.
    • Understanding of common application vulnerabilities and exploits.
    • Knowledge of web application vulnerabilities and exploits.
    • Experience with Active Directory (AD) enumeration and associated attacks.
    • Understanding of Public Key Infrastructure (PKI) and multifactor authentication.
    • Familiarity with cloud technologies and platforms such as AWS, Microsoft Azure, and Google Cloud Platform.
About Peraton

Peraton is a forward-thinking national security organization that drives missions of significance across the globe. As a premier mission capability integrator and transformative IT provider, we deliver trusted, highly differentiated solutions and technologies to safeguard our nation and allies. Peraton operates at the critical intersection of traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company is a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Our employees tackle the most challenging issues facing our customers every day.

Compensation Range

$104,000 - $166,000. This represents the typical salary range for this position based on experience and other factors.

  • Arlington, Virginia, United States Peraton Full time

    Key ResponsibilitiesPeraton is in search of a skilled Senior Cyber Penetration Tester to join our Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program. This role is pivotal in delivering top-tier cyber and technology security expertise to enhance innovative, efficient, and secure business operations.Location: Arlington, VA. Flexibility...


  • Arlington, Virginia, United States Peraton Full time

    Key ResponsibilitiesPeraton is in search of a seasoned Senior Cyber Penetration Tester to join our Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program. This role is pivotal in delivering premier cyber and technology security expertise to facilitate innovative, efficient, and secure business operations.Location: Arlington, VA....


  • Arlington, Virginia, United States Peraton Full time

    Position OverviewPeraton is in search of a skilled Senior Cybersecurity Penetration Tester to contribute to our Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program. This role is pivotal in delivering exceptional cyber and technology security expertise to facilitate innovative and secure business operations.Location: Arlington, VA....


  • Arlington, Virginia, United States Peraton Full time

    Position OverviewPeraton is in search of a seasoned Senior Cyber Penetration Tester to contribute to our Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program. This role is crucial in delivering premier cyber and technology security expertise to facilitate innovative, efficient, and secure operational processes.Work Location: Arlington,...


  • Arlington, Virginia, United States Peraton Full time

    Position OverviewPeraton is in search of a highly skilled Senior Cyber Penetration Tester to join our Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program. This role is crucial in delivering top-tier cyber and technology security expertise to enhance innovative, efficient, and secure business operations.Work Location: Arlington, VA....


  • Arlington, Virginia, United States Pennant Solutions Group Full time

    Position OverviewPennant Solutions Group is seeking a Penetration Tester Subject Matter Expert to enhance our cybersecurity initiatives.The ideal candidate will possess a Top Secret/Sensitive Compartmented Information (TS/SCI) clearance, a Bachelor's degree, and a minimum of four years of hands-on experience in penetration testing.Key...


  • Arlington, Virginia, United States Pennant Solutions Group Full time

    Position OverviewPennant Solutions Group is seeking a highly skilled Penetration Tester SME to enhance our cybersecurity efforts.The ideal candidate will possess a Top Secret/Sensitive Compartmented Information (TS/SCI) clearance, a Bachelor's degree, and a minimum of four years of experience in the field of penetration testing.Key Responsibilities:Conduct...


  • Arlington, Virginia, United States Pennant Solutions Group Full time

    Position OverviewPennant Solutions Group is seeking a highly skilled Penetration Tester Subject Matter Expert to enhance our cybersecurity efforts.The ideal candidate will possess a Top Secret/Sensitive Compartmented Information (TS/SCI) clearance, a Bachelor's degree, and hold a CompTIA Advanced Security Practitioner (CASP) certification, along with a...

  • Penetration Tester

    1 month ago


    Arlington, Virginia, United States Motion Recruitment Full time

    ?EGlobalTech, a Tetra Tech Company, is looking for a Penetration Tester and SME to join our Cyber Solutions Practice in Arlington, VA and provide on-site support a federal customer located in Washington, DC. Qualified candidates should have experience in software assurance, penetration testing with a range of automated tools, security patch management,...


  • Arlington, Virginia, United States Ampcus Full time

    Cybersecurity Incident Response Lead - III - IMG03 Hybrid Role - Multi-Year Contract At Ampcus, we are committed to supporting U.S. Government initiatives by providing top-tier cybersecurity vulnerability analysis services aimed at minimizing the risks and effects of vulnerabilities across Federal Civilian Executive Branch (FCEB) entities and Critical...


  • Arlington, Virginia, United States Rollout Systems Full time

    About the RoleWe are seeking a highly skilled Cybersecurity Specialist to join our team at Rollout Systems. As a key member of our Information Assurance team, you will be responsible for ensuring the security and integrity of our systems and data.Key ResponsibilitiesDevelop and Implement Security Standards: Determine enterprise information assurance and...


  • Arlington, Virginia, United States Chenega Corporation Full time

    Overview Lead Cybersecurity ArchitectLocation: Arlington, VAChenega IT Enterprise Services (CITES) is dedicated to delivering innovative technological solutions to federal entities and the Department of Defense. Established in 2016, CITES has rapidly emerged as a leader in best practices for contemporary federal operations.Are you prepared to advance your...


  • Arlington, Virginia, United States Two Six Technologies Full time

    About the RoleTwo Six Technologies is seeking a highly skilled Technical Program Manager to lead the delivery of technical services to our federal customers. This role involves managing operations and delivery for classified programs, providing significant autonomy in running one's own projects and managing client relationships with the support of a highly...

  • Program Manager

    6 days ago


    Arlington, Virginia, United States Two Six Technologies Full time

    About the RoleAt Two Six Technologies, we are a leading provider of innovative solutions for the world's most complex challenges. We are seeking a highly skilled Technical Program Manager to lead our efforts in delivering cutting-edge technical services to our federal customers.Key ResponsibilitiesManage operations and delivery for classified programs,...


  • Arlington, Virginia, United States Cybersecurity And Infrastructure Security Agency Full time

    The National Risk Management Center (NRMC) serves as the Nation's center for critical infrastructure risk analysis. NRMC provides critical analytical support to CISA's mission to understand, manage, and reduce risk to the cyber and physical infrastructure Americans rely on every day. NRMC is looking for candidates who are interested in analyzing critical...


  • Arlington, Virginia, United States Nightwing Full time

    About NightwingAt Nightwing, we are a leading provider of cybersecurity, intelligence, and services to the U.S. government. With over four decades of experience, our team has been delivering technically advanced full-spectrum cyber, data operations, systems integration, and intelligence support services to the nation's most mission-impacting initiatives.Job...


  • Arlington, Virginia, United States Core4ce Full time

    Company OverviewCore4ce stands at the forefront of IT and cybersecurity solutions, committed to providing innovative and effective services tailored to our clients, including federal government entities. Our dedication to excellence, continuous enhancement, and a collaborative work culture sets us apart in the industry.Position OverviewWe are in search of a...


  • Arlington, Virginia, United States Nightwing Full time

    About NightwingAt Nightwing, we are a leading provider of cybersecurity, intelligence, and services to the U.S. government. With over four decades of experience, our team has been delivering technically advanced full-spectrum cyber, data operations, systems integration, and intelligence support services to the nation's most mission-impacting initiatives.Job...


  • Arlington, Virginia, United States Core4ce Full time

    Company OverviewCore4ce stands at the forefront of IT and cybersecurity solutions, committed to providing innovative and effective services tailored to the needs of our clients, including federal government entities. Our organization emphasizes excellence, continuous improvement, and a collaborative work culture.Position SummaryWe are in search of a highly...


  • Arlington, Virginia, United States Core4ce Full time

    Company OverviewCore4ce stands at the forefront of IT and cybersecurity services, committed to providing cutting-edge solutions to our clientele, including federal government entities. Our organization emphasizes excellence, continuous enhancement, and a collaborative, vibrant workplace culture.Position OverviewWe are in search of a highly skilled...