Application Penetration Tester

Booz Allen Hamilton is seeking an Application Penetration Tester to evaluate security across web, network, and cloud environments from our Chantilly, Virginia site. The role centers on offensive security operations, translating findings into clear reports and presentations for both technical teams and executive stakeholders, and communicating recommendations to client partners.

Responsibilities

• Validate security controls and incident response through offensive security operations, including application penetration testing.
• Conduct web application security testing, network penetration testing, and cloud security testing.
• Produce thorough reports and presentations for technical and executive audiences.
• Manage security testing lifecycles in Windows and Unix-like environments.
• Present findings and strategic recommendations to client stakeholders, including technical staff, executive leadership, and legal counsel.
• Engage in innovative research and foster a culture of knowledge sharing.
• Apply penetration testing methodologies to a diverse range of projects as part of a security-focused team dedicated to cutting-edge research and ongoing knowledge exchange.

Requirements

• 1+ years of experience performing application penetration testing.
• Experience scripting or coding in Python, Go, or Bash.
• Experience in Windows environments and with Active Directory attack path enumeration.
• Experience with C2 frameworks, including Cobalt Strike, Mythic, or Havoc.
• Knowledge of network vulnerability assessments, web application security testing, network penetration testing, or red teaming.
• HS diploma or GED.

Technologies

• Python
• Go
• Bash
• Cobalt Strike
• Mythic
• Havoc
• Burp Suite Professional

Benefits

• Health insurance
• Life insurance
• Disability insurance
• Financial benefits
• Retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care

Location

Chantilly, VA (onsite)

Salary

USD 62,000 - 141,000 per yearly

Minimum Experience

1 year

Education

HS diploma or GED

Work Model

• Onsite: Work will primarily be performed at a Booz Allen office or customer facility, with direct collaboration with colleagues and customers as required by the role.
• Hybrid: Regular time from a Booz Allen facility is expected, in alignment with leadership expectations and role needs, with possible visits to customer facilities.
• Remote: There may be occasions when in-person work at Booz Allen or customer facilities is required.

Identity Verification

As part of the hiring process, you will complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. Booz Allen reserves the right to take your photograph to verify identity and prevent fraud.

Candidate AI Usage Policy

AI is part of Booz Allen's daily work, and the organization supports responsible and ethical use of AI tools. However, the candidate process should be based on your own skills and knowledge. The use of AI or other tools to assist with interview responses is prohibited unless explicit permission is granted.

Compensation

Compensation is influenced by factors such as location, education, knowledge, skills, competencies, and experience, as well as contract-specific considerations. The typical salary range for this position is $62,000.00 to $141,000.00 (annualized USD). This range is one component of Booz Allen’s total compensation package.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable law.