Cloud Pentester

Location: Chantilly, VA (On-site)

Job Type: Full-time

Travel Requirements: Minimal

Working Hours: Standard

Role Overview

Work with a national security-focused team providing advanced engineering and technology solutions for customers in the intelligence and national security communities. In this position, your efforts will contribute directly to protecting critical national security capabilities.

Key Responsibilities

• Conduct penetration testing, vulnerability assessments, and adversarial emulation against enterprise networks, operating systems, applications, virtualized environments, and cloud-based systems.
• Use offensive cyber techniques, attack methodologies, and system exploitation approaches to identify and validate security weaknesses.
• Evaluate risk by analyzing network architectures, security controls, and system configurations to identify potential attack paths.
• Perform security testing across Windows, Linux, and virtualized enterprise computing environments, including hypervisors and supporting infrastructure.
• Assess and validate IT security architectures, technical designs, and system implementations to ensure alignment with cybersecurity best practices.
• Review testing results, develop risk mitigation strategies, and provide recommendations to strengthen the organization’s security posture.
• Use network management, monitoring, and security assessment tools to support testing, reporting, and threat analysis.

Qualifications

Required:

• Active TS/SCI with a Polygraph.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline. Additional relevant experience may be accepted in place of a degree.
• Proven experience conducting penetration testing, vulnerability assessments, or offensive cyber operations.
• Experience applying adversarial tactics, techniques, and procedures (TTPs) to evaluate system and network security.
• Experience using cyber attack methodologies, exploitation techniques, and security testing frameworks.
• Working knowledge of cybersecurity principles, security controls, and operating system security for Windows, Linux, and virtualized platforms.
• Experience performing network security analysis, architecture reviews, and security control assessments.

Desired:

• Experience designing, implementing, or assessing enterprise security architectures.
• Experience evaluating complex Windows-based infrastructures, enterprise services, and system configurations.
• Experience testing or reviewing hypervisors, virtual environments, and enterprise computing platforms.
• Familiarity with major cloud service providers, cloud-native security concepts, and cloud architecture design.
• Experience developing risk management methodologies and translating technical findings into actionable mitigation plans.
• Hands-on experience with commercial and open-source penetration testing, vulnerability scanning, and network analysis tools.
• Relevant industry certifications such as OSCP, GPEN, CEH, CISSP, GCIH, or comparable cybersecurity certifications.

Compensation

Annual Base Salary: $190,500 to $232,800

This salary range applies to the Virginia area. The final offer will depend on the selected candidate’s knowledge, skills, abilities, and/or experience, and in consideration of internal parity.

Additional Compensation:

KBR may offer bonuses, commissions, or other compensation forms for certain job titles or levels based on internal policy or contractual designation. Additional compensation may include sign-on bonus, relocation benefits, short-term incentives, long-term incentives, or discretionary payments for exceptional performance.

Benefits

KBR provides competitive lifestyle benefits, which may include a 401(k) plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending accounts, disability coverage, paid time off, and a flexible work schedule. The company also supports career growth through professional training and development.

Equal Opportunity

KBR is an equal opportunity employer. All qualified applicants will be considered for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status, and/or beliefs, or any other characteristic protected by federal, state, or local law.