Cleared Penetration Tester

Fortreum is seeking a seasoned cleared penetration tester for a customer-facing role focused on hands-on security assessments. The position supports network, application (including API, web, and mobile), and social engineering engagements, with the expectation of advising clients on findings and delivering final artifacts within established timelines.

Location and Clearance Requirements

Seattle, WA (onsite). This role includes customer engagement and limited travel. Successful candidates must be able to work in a SCIF in Northern Virginia or Seattle, Washington and have active Top Secret clearance or ability to obtain Top Secret clearance.

Travel is expected to be limited; occasional client-site travel may be required to deliver professional services when needed.

Compensation

USD 130,000 - 160,000 per year (posted salary range).

Role Responsibilities

• Partner with internal team members to conduct penetration testing of customer networks, applications (API, web, and mobile), and/or social engineering activities to meet engagement objectives.
• Advise customers on vulnerability details, remediation strategies, and compliance requirements.
• Prepare final deliverables for customers within established timelines.
• Maintain positive relationships with customers and stakeholders throughout the engagement lifecycle.
• Coordinate project readiness with internal teams and customers.
• Conduct customer project readouts to communicate outcomes from penetration testing.
• Train and mentor junior team members.
• Interface with customers and internal delivery team members across all levels of the customer organization for the duration of the engagement.
• Continue professional development by achieving industry-specific certifications; must be willing to meet FedRAMP certification requirements as outlined by A2LA.

Required Qualifications

• Bachelor’s Degree or 4 years of equivalent job experience.
• 2+ years of professional services experience.
• 3+ years of web application and network penetration testing experience.
• Proficiency in at least one scripting language: bash, python, PowerShell, ruby, or equivalent.
• Strong technical acumen in penetration testing methodologies.
• Familiarity with industry frameworks such as OWASP, MITRE ATT&CK, OSSTMM, and/or PTES.
• Ability to work in a SCIF in Northern Virginia or Seattle, Washington.
• Active Top Secret clearance or ability to obtain Top Secret clearance.

Technologies and Frameworks

• bash, python, PowerShell, ruby
• OWASP, MITRE ATT&CK, OSSTMM, PTES
• FedRAMP, A2LA

Preferred Skills

• Certifications such as eCPPT, OSCP, OSCE, OSWE, or GPEN.
• Ability to quickly assess new and leading-edge technologies and concepts.
• Ability to manage multiple priorities simultaneously.
• Proven analytical and problem-solving skills.
• Experience developing technical content for website updates, whitepapers, and blog posts for internal and client use in security program evaluation and buildout.
• Ability to develop and maintain strong relationships with team members and clients.
• Familiarity with network architecture, network devices/services, development platforms, and software suites.
• Experience working in teams that include compliance specialists conducting security control assessments in parallel.
• Comfort supporting fast-paced team environments.
• Familiarity with penetration testing in cloud environments across varied technology stacks.

Education and Experience

• Minimum experience: 2 years
• Education: Bachelor’s Degree

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• 401K plan with a 4% match
• Company-paid short-term disability
• Company-paid long-term disability
• Company-paid AD&D and life insurance
• Flex time off
• Annual bonuses
• Training stipends
• Certification reimbursements
• Access to over 30,000 free online training courses
• Personal cell phone allowance
• New hire and annual home office stipend
• Spot awards
• Eleven paid holidays