Penetration Tester

Role overview Conduct and lead penetration tests to assess the security of systems supporting a federal education and student aid environment. The work combines hands-on testing, vulnerability analysis, clear reporting, and upkeep of the team’s testing infrastructure. The position is remote and contingent on a contract award.

Responsibilities - Plan and perform penetration tests, including leading testing activities for a red team. - Identify vulnerabilities, investigate root causes, and recommend remediation aligned with NIST 800-53 controls. - Explain and demonstrate findings to system owners and engineers. - Maintain red team infrastructure. - Develop or adapt tools to automate vulnerability discovery and exploitation.

Requirements - Bachelor’s degree in a relevant discipline, such as cybersecurity, information systems, computer science, engineering, or business administration. - At least five years of penetration testing experience. - An industry certification such as CEH, CySA+, GCIH, Security+ CE, SSCP, or another listed security certification. - Practical experience with Kali Linux and tools such as Nmap, Burp Suite, and Metasploit. - Ability to assess vulnerabilities, analyze root causes, and report results using recognized methods such as NIST SP 800-115, PTES, ISSAF, or the OWASP Web Security Testing Guide. - U.S. citizenship and ability to obtain a High Risk Public Trust clearance.

Nice to have - An active Secret or Top Secret clearance.

Benefits and work setup The role is remote. Listed offerings include medical, dental, vision, disability and life insurance options, health and flexible spending accounts, a 401(k) match, paid time off, floating federal holidays, and incentives for relevant certifications.