Penetration Tester - Cyber Engineer

BTS Software Solutions is hiring a Penetration Tester - Cyber Engineer for a full-time, 100% on-site role based in Aberdeen, MD at Aberdeen Proving Ground. The position focuses on conducting in-depth security assessments and analysis using penetration testing and threat-hunting techniques in support of sophisticated systems.

This role requires hands-on testing capability, strong technical grounding across Linux, networking, and web services, and the clearance posture needed to work in a secure environment. If you have experience across grey and black box penetration testing and can apply exploitation and scripting skills to real targets, this opportunity aligns well with your background.

Responsibilities

• Perform in-depth assessments and analyses of sophisticated systems using penetration testing and threat-hunting techniques

Requirements

• Active Secret Clearance with the potential to obtain TS/SCI
• Bachelor's degree in a related field and 5 years of relevant experience
• Professional experience in penetration testing or threat hunting
• Proven ability experience in grey and black box penetration testing
• In-depth understanding of OWASP Top 10, DoD, NSA, or other industry-standard vulnerability and penetration testing standards
• Proficiency with common penetration testing tools including nmap, Wireshark, Burp Suite, Nessus, and similar utilities
• Extensive knowledge of Linux operating systems
• Expertise in exploitation techniques including buffer overflows, fuzzing, SQL injection, Man-in-the-Middle attacks, covert channels, secure tunneling, XSS, privilege escalation, and lateral movement
• Strong grasp of networking, TCP/IP, virtualization, and web services
• Familiarity with interfacing with electronic hardware (including taking apart devices and identifying hardware components)
• Minimum of 2-3 years of exploitation experience

Technologies

• nmap
• Wireshark
• Burp Suite
• Nessus
• OWASP Top 10
• Linux
• TCP/IP
• Python
• Bash
• Perl
• Ruby

Benefits

• Competitive health benefits package
• PTO
• 401K matching
• Vested from day one

Desired

• Active TS/SCI
• Certifications such as OSCP, OSCE, GPEN, GWAPT, GXPN, CEH, or CISSP
• Experience in malware analysis or digital computer forensics
• Scripting skills in Bash, Python, Perl, or Ruby
• Systems programming experience
• Keen interest in emerging penetration testing technologies and techniques
• Familiarity with Android operating systems
• Knowledge of UAS/UXS technologies
• Understanding of radios and radio protocols
• Experience analyzing embedded devices
• Development and presentation of proof-of-concepts to demonstrate exploitation techniques