Penetration Tester - Cyber Engineer

Join Peraton for a penetration testing and threat-hunting focused role supporting in-depth assessments of sophisticated systems. This position is 100% on-site at Aberdeen Proving Ground, MD and requires an active clearance and relevant hands-on security experience.

Role Overview

In this junior penetration tester position, you will perform detailed assessments and analyses of complex systems. The work combines penetration testing with threat-hunting techniques to support security outcomes.

Responsibilities

• Conduct in-depth assessments and analyses of sophisticated systems using penetration testing and threat-hunting techniques.

Required Qualifications

• Active Secret Clearance with the ability to obtain TS/SCI
• US Citizenship
• Experience requirements: 5 years with BS/BS; 3 years with MS/MA; 0 years with PhD
• Professional experience in penetration testing or threat hunting
• Demonstrated ability in grey and black box penetration testing
• In-depth understanding of OWASP Top 10, DoD, NSA, or industry-standard Vulnerability and Penetration Testing Standards
• Proficiency with penetration testing tools including nmap, Wireshark, Burp Suite, Nessus, and similar utilities
• Extensive knowledge of Linux operating systems
• Expertise in exploitation techniques: buffer overflows, fuzzing, SQL injection, Man-in-the-Middle attacks, covert channels, secure tunneling, XSS, privilege escalation, and lateral movement
• Strong grasp of networking, TCP/IP, virtualization, and web services
• Familiarity with interfacing with electronic hardware, including taking apart devices and identifying hardware components

Desired Qualifications

• Active TS/SCI
• Certifications such as OSCP, OSCE, GPEN, GWAPT, GXPN, CEH, or CISSP
• Experience in malware analysis or digital computer forensics
• Scripting skills in Bash, Python, Perl, or Ruby
• Systems programming experience
• Keen interest in emerging penetration testing technologies and techniques
• Familiarity with Android operating systems
• Knowledge of UAS/UXS technologies
• Understanding of radios and radio protocols
• Experience analyzing embedded devices
• Ability to develop and present proof-of-concepts to demonstrate exploitation techniques

Technologies and Skills

• nmap, Wireshark, Burp Suite, Nessus
• Linux
• OWASP Top 10
• TCP/IP
• Exploitation techniques: buffer overflows, fuzzing, SQL injection, Man-in-the-Middle attacks, covert channels, secure tunneling, XSS, privilege escalation, lateral movement

Compensation

USD 104,000 - 166,000 per year. This represents a typical salary range. Actual pay may vary based on scope and responsibilities, experience, education, knowledge, skills, competencies, geographic location, and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits

• Medical, dental, vision
• Life insurance
• Health savings account
• Short-term and long-term disability
• EAP
• Parental leave
• 401(k)
• Paid time off (PTO) for vacation
• Company paid holidays

Location

Aberdeen Proving Ground, MD (onsite)

Application Notes

• The application period is estimated to be 30 days from the job posting date.
• Applying indicates interest in the role and the company.
• During application review, candidates may be required to participate in an on-camera interview and complete an identity verification process.
• AI tools of any kind are strictly prohibited during Peraton interviews unless the candidate has obtained prior written authorization.
• All interview responses must be the candidate’s own.

Equal Employment Opportunity

Peraton is an equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.