Penetration Tester

Acuity Inc is looking for a Penetration Tester to support federal clients from Virginia (onsite). This role blends hands-on testing with clear, defensible reporting, helping strengthen security defenses across servers, web applications/services, and databases. Alongside the work, Acuity Inc offers Health/Dental/Vision, 401K matching, up to $6K training and professional development annually, and corporate events and team-building.

Responsibilities

• Perform internal penetration testing and vulnerability assessments covering servers, web applications, web services, and databases
• Conduct security reviews and technical research, delivering provided reporting to support improved security defense mechanisms
• Carry out manual exploitation to compromise operating systems, web applications, and databases
• Review and validate findings from web/OS scanners, scans, and static source code analysis
• Identify vulnerabilities, misconfigurations, and compliance issues
• Produce final reports and defend findings, including risk or vulnerability details, mitigation strategies, and references
• Provide security recommendations to developers, system administrators, project managers, and senior government stakeholders
• Report vulnerabilities discovered during security assessments
• Write Penetration Testing Rules of Engagement (RoE), Test Plans, and Standard Operating Procedures (SOP)

Requirements

• Experience with NIST 800-53 and the Risk Management Framework
• Ability to meet and coordinate with multiple audiences, including developers, system administrators, project managers, and senior government stakeholders
• Experience with AWS Cloud Security
• Strong writing skills
• Certifications: CEH (Certified Ethical Hacker) and CPT (Certified Penetration Tester)
• TS/SCI w/Poly

Compensation: USD 175,000 - 200,000 per year.