Cleared Senior Penetration Tester

Fortreum is hiring a cleared senior penetration tester to support penetration testing for cloud service providers in alignment with FedRAMP and other compliance frameworks. This onsite role in Seattle, Washington blends hands-on offensive security work with client-facing delivery, team leadership, and Top Secret clearance requirements.

What you’ll do

• Partner with the team to run penetration tests across networks, applications (including APIs, mobile apps, and web applications), and other systems to uncover vulnerabilities and meet engagement objectives
• Build, improve, and refine penetration testing methodologies, tools, and techniques to keep pace with evolving threats and ensure coverage
• Advise customers on vulnerability details, remediation strategies, and compliance expectations
• Produce final engagement deliverables within established timelines
• Maintain productive relationships with customers and stakeholders throughout engagements
• Coordinate internal and customer readiness for project execution
• Address client and project blockers and escalate to management when additional support is needed
• Conduct customer project readouts to communicate outcomes of penetration testing activities
• Mentor junior penetration testing team members through guidance, knowledge-sharing, and hands-on training
• Interface with customers and internal delivery teams across the entire engagement lifecycle, including interactions at multiple levels within customer organizations
• Support Red Team operations and pursue ongoing professional development, including achieving industry specific certifications (with willingness to meet FedRAMP certification requirements as outlined by A2LA)

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or 5+ years of equivalent penetration testing experience
• 4+ years of professional services experience (consulting)
• 5+ years of web application and network penetration testing experience
• Proficiency in one or more scripting languages such as bash, python, PowerShell, or ruby
• Strong technical acumen in penetration testing methodologies and a solid grasp of security principles and methodologies
• Familiarity with best-practice frameworks including OWASP, OSSTMM, or PTES
• Ability to work in a SCIF in Northern Virginia or Seattle, Washington
• Active Top Secret clearance or ability to obtain Top Secret clearance
• Relevant certifications such as OSCP, OSCE, OSWE, GWAPT, or GPEN (or other relevant certifications)
• Experience with code review, reverse engineering, and exploit development
• Ability to assess new and leading-edge technologies and concepts quickly
• Strong analytical and problem-solving skills, with capability to manage multiple priorities
• Ability to create technical content (for website updates, whitepapers, and blog posts) used internally and by clients to support security program evaluation and development
• Comfort working with a team that includes compliance specialists performing security control assessments in parallel
• Experience performing penetration testing in cloud environments across a variety of technology stacks
• Must be a US Citizen due to contractual requirements
• Ability to attain a US Security Clearance if needed

Technologies

• bash, python, PowerShell, ruby
• OWASP, OSSTMM, PTES
• FedRAMP, A2LA
• OSCP, OSCE, OSWE, GWAPT, GPEN

Compensation and location

• Location: Seattle, WA (onsite)
• Salary range: USD 165,000 - 185,000 per year

Benefits

• Medical, dental, and vision insurance
• 401K plan with a 4% match
• Company paid short-term disability, long-term disability, and AD&D and life insurance
• Flex time off
• Annual bonuses, spot awards
• Training stipends and certification reimbursements
• Access to over 30,000 free online training courses
• Personal cell phone allowance
• New hire and annual home office stipend
• Eleven paid holidays

Travel

• Travel is expected to be limited
• Periodic travel to client locations may be required to deliver professional services when needed

Fortreum also notes that its team members have supported major cloud providers, with this role focused on penetration testing of cloud service providers in support of FedRAMP and other compliance frameworks.

Equal Opportunity

Fortreum is an Affirmative Action and Equal Opportunity Employer. All qualified applicants receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status, and no discrimination occurs based on disability. For reasonable accommodation, contact [email protected] or call 703-594-1460. In compliance with federal law, identity and eligibility to work in the United States must be verified and the employment eligibility verification form completed upon hire.

Salary posted range: $165,000 - $185,000 annual salary.