Red Team Tester

Role overview Support authorized red-team and penetration-testing work for systems and applications used in federal student aid operations. Under senior team guidance, investigate potential weaknesses, validate security controls, document attack paths, and provide practical findings that can guide remediation. The role is remote and contingent on a contract award.

Responsibilities - Assist with authorized assessments of networks, applications, APIs, infrastructure, and cloud environments, following defined rules of engagement. - Support reconnaissance, enumeration, vulnerability validation, exploitation, and post-exploitation analysis. - Test web, network, API, and infrastructure security, including scenarios based on real-world adversary techniques. - Use the MITRE ATT&CK framework to classify and document relevant techniques. - Record testing steps, evidence, vulnerabilities, and attack paths, then write findings with risk and remediation guidance. - Retest weaknesses after fixes and keep current with emerging vulnerabilities and defensive practices.

Requirements - A relevant bachelor’s degree or equivalent applicable experience. - Three to five years of experience in the field and an industry professional certification. - Hands-on experience in penetration testing, vulnerability assessment, ethical hacking, or related security testing. - Working knowledge of network protocols, operating systems, web technologies, common vulnerabilities, and penetration-testing methods. - Understanding of attacker tactics and the ability to communicate technical findings and remediation recommendations clearly. - U.S. citizenship and ability to obtain a Public Trust.

Nice to have - Experience with common offensive security tools, Windows and Linux, AWS security testing, or NIST SP 800-115. - Scripting skills in Python, PowerShell, Bash, or similar languages; relevant credentials may include Security+, CEH, eJPT, PNPT, or OSCP.

Benefits and work setup The position is remote and depends on a contract win. Benefits described include health, dental, and vision coverage; disability and life insurance; retirement-plan matching; paid time off and floating federal holidays; and incentives for relevant certifications.