Penetration Tester
Job Description
Join a team performing threat-based penetration testing and vulnerability discovery across systems and networks.
Responsibilities
- Conduct testing and analysis to identify vulnerabilities and potential threat vectors in systems and networks
- Develop exploits and engineer attack methodologies as part of hands-on assessments
- Use knowledge of MITRE ATT&CK and common security control implementations to plan and conduct threat-based assessments
- Provide advanced advising using extensive technical expertise and broad industry knowledge
- Deliver innovative solutions to complex problems encountered during testing
- Work with limited direction and mentor and supervise team members as needed
Requirements
- 3+ years experience with MITRE ATT&CK, including test planning and security control assessment
- 3+ years experience with cyber penetration testing or developing risk and threat mitigation plans
- 3+ years experience operating in Linux, Windows, and virtual platforms
- 3+ years experience with computer attack methods and system exploitation techniques
- 3+ years experience leveraging adversarial tactics for hands-on security testing
- 3+ years experience performing network security analysis, including software or traffic analysis
- Secret clearance
- HS diploma or GED
Technologies
- MITRE ATT&CK
- Linux, Windows, virtual platforms
- Atomic Red Team, Scythe
- Mandiant ASV, AttackIQ
- Java, Ruby, Python, JavaScript, Rust, C
Benefits
- Health, life, disability, financial, and retirement benefits
- Paid leave
- Professional development
- Tuition assistance
- Work-life programs
- Dependent care
- Recognition awards program
Clearance
- Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information
- Secret clearance is required
Compensation
- Projected compensation range: $86,900.00 to $198,000.00 (annualized USD)
- This posting will close within 90 days from the Posting Date
- Salary is determined by factors including location and the individual’s education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements
Identity Verification and Interview Requirements
- During the hiring process, you will complete an identity verification process using advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud
- You are expected to be on camera during interviews and assessments
- The company reserves the right to take your picture to verify your identity and prevent fraud
Candidate AI Usage Policy
- AI is part of daily work and use of AI tools must be responsible and ethical
- Using artificial intelligence or other tools to assist with responses during interviews is prohibited unless permission is explicitly provided (in-person or virtual)
Work Model
- Onsite: work will primarily be performed at a Booz Allen office or customer facility, where employees collaborate directly with colleagues and customers as required by the role
Location
- Fort Meade, MD (onsite)
Non-Discrimination
- All qualified applicants receive consideration for employment without regard to disability, protected veteran status, or other status protected by applicable federal, state, local, or international law