Cybersecurity Penetration Tester SE-4

Odyssey Systems Consulting Group, Ltd. is supporting the 48th Cyberspace Test Squadron (48 CTS) under the TMAS III contract and is hiring an SE-4 Cybersecurity Penetration Tester to help execute hands-on security testing for Air Force and Space Force systems. This role supports penetration testing, compliance testing, and vulnerability analysis for systems at Peterson Space Force Base, with periodic CONUS and OCONUS travel.

The position is based at Peterson Space Force Base, Colorado Springs, CO and is onsite, full-time. Salary is listed as USD 170,000 - 190,000 per year, with 25% CONUS/OCONUS TDYs.

What you will do

• Lead and conduct independent penetration testing, including data collection, test automation, and reporting
• Develop test tools and strategies aligned to DoD cybersecurity assessments
• Perform system security analysis to identify vulnerabilities and exploitation techniques across software and hardware systems
• Execute hands-on testing across multiple operating systems, including Windows, Linux, and UNIX
• Test software and databases including SQL Server, Oracle, and Apache, among others
• Provide technical guidance and mentorship to penetration test teams
• Document and communicate test results for both technical and non-technical audiences
• Manage, plan, and provide direction for CVI, ACD, CVPA, and AA cyber test teams
• Interface with DoD Program Offices to scope, plan, execute, and report penetration test activities

Minimum qualifications

• US citizenship
• Active Secret required; must be able to obtain and maintain a Top Secret clearance
• Master’s degree in cybersecurity, computer engineering, computer science, IT systems, or a related technical discipline, plus at least 10 years of relevant experience
• Must obtain DoD 8570 IAT Level III certification (CASP, CISSP, ISSEP, etc.) within 6 months of hire and maintain certification
• Experience with penetration testing tools and methods
• Experience exploiting web applications
• Strong analytical, communication, and technical documentation skills
• Ability to work independently and on cross-functional teams

Technologies and technical skills

• Penetration testing tools and methods using environments including Windows, Linux, and Kali
• Exploitation across networks, web applications, OS, and embedded systems
• Experience testing and exploiting web applications
• Programming and scripting knowledge: Python, Ruby, JavaScript, Bash, PowerShell, PHP (preferred)
• Compiled language knowledge: C, C++, Assembly, Java (preferred)
• Source code vulnerability analysis knowledge (preferred), plus understanding of network security and wired and wireless protocol structures
• Relevant skills include CVI, CVPA, ACD, and AA test methodologies
• Additional listed technologies: Windows, Linux, UNIX, SQL Server, Oracle, Apache, Kali

Preferred qualifications

• Top Secret clearance
• Advanced cybersecurity certifications such as CISSP, CASP, OSCP, OSEP, OSWE, GPEN, GWAP, etc.
• Experience leading penetration testing teams and events
• Knowledge of source code vulnerability analysis
• Knowledge of wired and wireless network protocols
• Experience with interpreted and compiled programming languages