Penetration Tester
Senior
Application Security
Cloud Platforms
Cybersecurity
Cybersecurity Tools
Engineer
Engineering
Information Security
InfoSec
Investigative Skills
Nessus
Offensive Security
Penetration Testing
Risk Governance
Risk Management
Security
Security Automation
Security Clearance
Security Compliance
Security Operations
Security Standards
Security Testing
Technical Lead
Vulnerability Assessment
Vulnerability Scanners
Vulnerability Scanning
Job Description
ASRC Federal seeks an experienced Penetration Tester to lead advanced security assessments, develop testing strategies, and mentor junior testers across cybersecurity disciplines. This position is based in Washington, DC with a hybrid work arrangement, and offers a compensation range of USD 117,373 - 199,496 per year.
Responsibilities
- Lead and perform advanced security assessments, including hands-on penetration testing of systems and applications.
- Identify vulnerabilities, assess risks, and deliver clear, actionable remediation recommendations.
- Develop and maintain assessment plans aligned with NIST SP 800-53 and FedRAMP Cloud Security Controls.
- Execute security assessments per defined plans and document findings accurately and promptly.
- Design, develop, and maintain tools and scripts to automate and enhance penetration testing activities.
- Manage and mentor a small team of junior penetration testers; provide technical guidance and training.
- Build and lead a Purple Team to perform joint red/blue team exercises at customer sites.
- Support secure systems operations and maintenance, including security validation and accreditation activities.
- Analyze and mitigate system security threats throughout the lifecycle, including risk assessments and implementation of security engineering controls.
- Ensure compliance with business continuity, operations security, insider threat detection, physical security analysis, and regulatory requirements.
- Communicate technical findings effectively to technical teams and executive stakeholders.
Requirements
- Bachelor's degree in a related field.
- 5+ years of relevant experience in cybersecurity and penetration testing (or an equivalent combination of education and experience).
- Active DOE Q-Clearance or Top Secret (TS) equivalent required.
- OSCP (Preferred)
- OSCE (Preferred)
- CEH (Preferred)
- CISSP (Preferred)
Technologies
- Linux
- Tenable Nessus
- Forescout
- Carbon Black
- Invicti
- Scythe
- Rubrik
- Fidelis
Benefits
- Health care
- Dental
- Vision
- Life insurance
- 401(k)
- Education assistance
- Paid time off (PTO) including holidays
- Other paid leave required by law
EEO Statement
ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.