Work Location: This is a remote position, but candidate must be willing to work during the hours of 8am - 5pm EST
This position is contingent upon contract award
What You Will Do
Develop rules of engagement and test plans, coordinate testing with system owners and ISSOs, and track findings through POA&Ms.
Lead and execute penetration testing assessments across network infrastructure, applications, APIs, and AWS cloud environments to identify, validate, and assess security vulnerabilities.
Plan and conduct red team exercises to simulate real-world adversary tactics, techniques, and procedures and evaluate the organization’s ability to detect and respond to threats.
Apply industry-recognized testing methodologies and standards, including NIST SP 800-115, MITRE ATT&CK, and DHS Risk and Vulnerability Assessment (RVA) standards, to ensure consistent and comprehensive security assessments.
Analyze testing results, validate findings, assess potential business impact, and provide actionable, risk-based remediation recommendations to technical teams and stakeholders.
Maintain, configure, and optimize penetration testing tools, frameworks, and supporting technologies to support effective and efficient security assessments.
Collaborate with security, cloud, application development, and infrastructure teams to communicate findings, support remediation efforts, and improve the organization’s overall security posture.
Mentor and provide technical guidance to junior penetration testers, fostering technical growth, knowledge sharing, and adherence to established testing methodologies and best practices.
Continuously evaluate emerging attack techniques, vulnerabilities, and offensive security tools to enhance penetration testing capabilities and address evolving threats.
Qualifications
Basic Qualifications
Must be a U.S. Citizen with the ability to obtain and maintain the required Public Trust level clearance
Bachelor's Degree and 12 years of experience, a Master's Degree and 10 years of experience, an Associate's Degree and 14 years, or a High School Diploma or equivalent and 16 years of experience
One (or more) of the following certifications: OSCP, OSCE, GXPN or CEH
Demonstrated experience conducting penetration testing across network infrastructure, web applications, APIs, and AWS cloud environments.
Working knowledge of established penetration testing methodologies and security frameworks, including NIST SP 800-115, MITRE ATT&CK, and Department of Homeland Security (DHS) Risk and Vulnerability Assessment (RVA) standards.
Experience configuring, maintaining, and optimizing penetration testing tools, frameworks, and automated security validation platforms.
Ability to identify and validate vulnerabilities, assess risk and potential business impact, and communicate actionable remediation recommendations to technical teams and stakeholders.
Experience mentoring junior penetration testers, providing technical guidance, and promoting adherence to testing methodologies and security best practices.
Strong analytical, problem-solving, and technical documentation skills, with the ability to translate complex security findings into clear, actionable recommendations.
Preferred Qualifications
Active Secret clearance
AWS Certified Security - Specialty certification
Experience with automated penetration testing and security validation platforms such as Pentera, Cymulate, Picus Security, Intruder, or similar
Experience planning and executing red team exercises, adversary emulation, and attack simulations to identify security weaknesses and evaluate defensive capabilities.
Target Salary Range $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement
Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
Application Statements The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.
- EEO
- EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
