Senior Penetration Tester
Location: Remote / Occasional travel to DC when needed
Duration: 5 Years
8–12+ years penetration testing and security assessment
Penetration testing, exploit validation, web/network testing, vulnerability reporting
Required Skills:
· Extensive experience leading authorized penetration testing, ethical hacking, red team assessments, and technical security testing across enterprise networks, applications, cloud environments, and infrastructure.
· Advanced hands-on experience with penetration testing tools such as Burp Suite, Metasploit, Nmap, Nessus, Kali Linux, Wireshark, and similar security assessment platforms.
· Expertise in web application and API penetration testing, OWASP Top 10 vulnerabilities, authentication weaknesses, privilege escalation, and security misconfiguration analysis.
· Experience conducting internal and external network penetration testing, Active Directory security assessments, cloud penetration testing, and controlled exploitation of identified vulnerabilities.
· Strong understanding of NIST SP 800-115, NIST SP 800-53A, MITRE ATT&CK, OWASP testing methodologies, and CISA High Value Asset assessment practices.
· Ability to develop penetration testing methodologies, rules of engagement, assessment schedules, test plans, and technical testing procedures.
· Experience preparing detailed penetration testing reports, risk-rated findings, proof-of-concept evidence, remediation recommendations, and executive-level assessment summaries.
· Proven ability to lead penetration testing teams, coordinate with System Owners and security assessors, validate remediation actions, and support federal security authorization activities.
