Beltsville, MD

Cybersecurity Jobs in Beltsville, MD

4 jobs found

Include remote jobs

18d ago

Senior Penetration Tester

SkyePoint Decisions Beltsville, MD

Beltsville, MD

18d ago

Contract Senior Active Directory Security Application Security

Apply Now

Job Description

SkyePoint Decisions is seeking a Senior Penetration Tester / PenTest Operator to support a Department of State program focused on High Value Asset (HVA) security assessments.

Responsibilities

Lead penetration testing across internal networks, external networks, web applications, enterprise systems, cloud-connected systems, and mission environments.
Support HVA cybersecurity assessments by identifying and communicating exploitable vulnerabilities, validating security control effectiveness, and determining risk to critical systems and data.
Perform network mapping, reconnaissance, vulnerability validation, exploitation, post exploitation analysis, and document attack paths in accordance with approved Rules of Engagement.
Contribute to Rules of Engagement, test plans and objectives, scope inputs and assessment documentation, and update assessment procedures for management and stakeholder approval.
Conduct external testing to determine what an outside attacker may access, exploit, or exfiltrate within approved scope.
Conduct internal testing to evaluate risk from users or systems with different access levels, including privilege escalation, lateral movement, persistence, and Active Directory attack paths.
Support red team and adversary emulation activities, including realistic threat behavior, targeted access objectives, command-and-control simulation, crafted test artifacts, and controlled social engineering when authorized.
Execute web application testing aligned to common vulnerability classes, including broken access control, authentication and authorization weaknesses, injection flaws, cross-site scripting, insecure configuration, and other OWASP Top 10 risks.
Use offensive security tools and frameworks within approved engagement boundaries (e.g., Kali Linux, Burp Suite, Metasploit, Nmap, Nessus, Wireshark, BloodHound, Impacket, Responder, Hashcat, John the Ripper, Cobalt Strike, Sliver).
Drive vulnerability analysis and validation using manual techniques, automated tools, and custom scripts or proof-of-concept code where appropriate.
Support purple team and detection validation by mapping attacker behavior to defensive telemetry, identifying detection gaps, and recommending improvements to SIEM, EDR, and incident response processes.
Analyze logs, endpoint artifacts, and network telemetry during exercises or assessments to validate detection and escalation of adversary behaviors.
Produce clear, evidence-based reports covering findings, affected assets, exploitability, business or mission impact, and prioritized remediation recommendations.
Deliver technical and executive out-briefs to client stakeholders, including system owners, security operations teams, engineering teams, and senior leaders.
Stay current on emerging attack techniques, offensive tooling, detection approaches, and federal cybersecurity requirements to strengthen client security posture.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field; additional relevant experience may be considered in lieu of degree.
Minimum of five (5) or more years of hands-on experience in penetration testing, red team operations, adversary emulation, vulnerability assessment, application security testing, cyber operations, or related offensive security work.
ACTIVE and MAINTAINED SECRET Federal or DoD security clearance.
Experience performing internal and external network penetration testing, including reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, and documentation of attack paths.
Experience performing web application penetration testing using manual and automated techniques.
Experience assessing Active Directory environments, Windows and Linux systems, and common enterprise network services.
Experience with tools including Burp Suite, Metasploit, Nmap, Nessus, Kali Linux, Wireshark, BloodHound, Impacket, Responder, Hashcat, John the Ripper, Cobalt Strike, Sliver, or similar tools.
Experience developing test plans, documenting Rules of Engagement, tracking assessment activities, and producing formal penetration test reports.
Ability to explain technical findings, attack paths, business impact, and remediation options to technical and non-technical stakeholders.
Strong written and verbal communication skills, including client-ready deliverables and executive-ready summaries.
Ability to work independently, manage multiple priorities, and collaborate across multidisciplinary teams in complex federal environments.

Technologies

Kali Linux
Burp Suite
Metasploit
Nmap
Nessus
Wireshark
BloodHound
Impacket
Responder
Hashcat
John the Ripper
CrackMapExec
Cobalt Strike
Sliver
Active Directory
OWASP Top 10
SIEM
EDR

Preferred Qualifications

ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance.
Experience supporting HVA cybersecurity assessments or federal enterprise penetration testing programs.
One or more relevant offensive security certifications such as OSCP, GPEN, GWAPT, GXPN, GRTP, PenTest+, CEH, GCIH, or similar certification.
Experience with adversary emulation, purple team operations, detection engineering support, or validation of SIEM and EDR detection coverage.
Experience with Cobalt Strike, Sliver, custom payload development, or command-and-control simulation in approved assessment environments.
Experience with cloud security testing across AWS, Azure, or other cloud environments.
Experience supporting incident response, threat hunting, or post-incident analysis.
Experience creating proof-of-concept exploit examples for reports or live demonstrations in controlled, authorized environments.
Experience mentoring junior penetration testers or leading small offensive security workstreams.
Excellent oral and written communication and presentation skills.

Benefits

Certification incentive program
PTO
Floating federal holiday options
Insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs]
Flex Spending Accounts [FSAs]
Full dental plans
Vision
ST/LT disability
Life insurance
401k matched

Compensation

Salary Range: TBD
Salary is determined by location, work schedule, education, knowledge, skills, competencies, experience, contract-specific affordability, market data, and business considerations.

What We Can Offer You

Great benefits including multiple insurance options, HSAs, FSAs, full dental, ST/LT disability, life insurance, floating federal holiday options, and 401k matched
Certificate incentive program to reward certifications aligned with business needs
Flexible work environment

Location: Beltsville, MD (onsite)
Job type: contract
Experience: 5+ years

View full job page →

24d ago

Pentest Operator / Penetration Tester

System One Beltsville, MD

Beltsville, MD

24d ago

$120k - $170k/yr Full time Application Security Application Security Testing Cybersecurity Tools

Apply Now

Job Description

System One is seeking a Pentest Operator / Penetration Tester to support and lead penetration testing engagements for High Value Asset (HVA) systems and enterprise security assessments in a Beltsville, MD onsite role. This position involves both internal and external testing, adversary emulation, and executive-ready reporting, backed by the opportunity to apply offensive security skills against mission-critical environments. Salary range: USD 120,000 - 170,000 per year.

Responsibilities

Perform penetration testing across internal networks, external networks, web applications, enterprise systems, cloud-connected systems, and mission environments.
Support HVA cybersecurity assessments by identifying exploitable vulnerabilities, validating security control effectiveness, and determining risk to critical systems and data.
Execute activities including network mapping, reconnaissance, vulnerability validation, exploitation, post-exploitation analysis, and documentation of attack paths within approved Rules of Engagement.
Draft and/or contribute to Rules of Engagement, test plans, scope documentation, and revisions to assessment procedures for management and stakeholder approval.
Conduct external testing to determine what an outside attacker may be able to access, exploit, or exfiltrate within scope.
Conduct internal testing focused on risk from users and systems with different access levels, including privilege escalation, lateral movement, persistence, and Active Directory attack paths.
Support red team and adversary emulation by simulating realistic threat behavior, including targeted access objectives, command-and-control simulation, crafted test artifacts, and controlled social engineering when authorized.
Perform web application testing against common vulnerability classes, including broken access control, authentication and authorization weaknesses, injection flaws, cross-site scripting, insecure configuration, and other OWASP Top 10 risks.
Use offensive security tools and frameworks such as Kali Linux, Burp Suite, Metasploit, Nmap, Nessus, Wireshark, BloodHound, Impacket, Responder, Hashcat, John the Ripper, CrackMapExec, Cobalt Strike, Sliver, and similar tools within approved boundaries.
Perform vulnerability analysis and validation using manual methods, automated tooling, and custom scripts or proof-of-concept code where appropriate.
Support purple team and detection validation by mapping attacker behavior to defensive telemetry, identifying detection gaps, and recommending improvements to SIEM, EDR, and incident response processes.
Analyze logs, endpoint artifacts, and network telemetry during exercises or assessments to validate whether behaviors are detected and escalated appropriately.
Write and present evidence-based reports covering findings, affected assets, exploitability, business or mission impact, and prioritized remediation recommendations.
Deliver technical and executive out-briefs to system owners, security operations, engineering teams, and senior leaders.
Stay current on emerging attack techniques, offensive tooling, detection approaches, and federal cybersecurity requirements to strengthen client security posture.

Requirements

ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field (additional relevant experience may be considered in lieu of degree).
Minimum 5 (five) years of hands-on experience in penetration testing, red team operations, adversary emulation, vulnerability assessment, application security testing, cyber operations, or related offensive security work.
Experience with internal and external network penetration testing, including reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, and documentation of attack paths.
Experience conducting web application penetration testing using both manual and automated techniques.
Experience assessing Active Directory environments, Windows and Linux systems, and common enterprise network services.
Experience with common penetration testing tools including Burp Suite, Metasploit, Nmap, Nessus, Kali Linux, Wireshark, BloodHound, Impacket, Responder, Hashcat, John the Ripper, Cobalt Strike, Sliver, or similar tools.
Experience developing test plans, documenting Rules of Engagement, tracking assessment activities, and producing formal penetration test reports.
Ability to explain technical findings, attack paths, business impact, and remediation options to technical and non-technical stakeholders.
Strong written and verbal communication skills for client-ready deliverables and executive-ready summaries.
Ability to work independently, manage multiple priorities, and collaborate across multidisciplinary teams in complex federal environments.

Technologies

Kali Linux, Burp Suite, Metasploit, Nmap, Nessus, Wireshark, BloodHound, Impacket, Responder, Hashcat, John the Ripper, CrackMapExec, Cobalt Strike, Sliver
OWASP Top 10, Active Directory, SIEM, EDR

What Would Be Nice To Have

ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance.
Experience supporting HVA cybersecurity assessments or federal enterprise penetration testing programs.
One or more relevant offensive security certifications such as OSCP, GPEN, GWAPT, GXPN, GRTP, PenTest+, CEH, GCIH, or similar certification.
Experience with adversary emulation, purple team operations, detection engineering support, or validation of SIEM and EDR detection coverage.
Experience with Cobalt Strike, Sliver, custom payload development, or command-and-control simulation in approved assessment environments.
Experience with cloud security testing or assessment activities across AWS, Azure, or other cloud environments.
Experience supporting incident response, threat hunting, or post-incident analysis.
Experience creating proof-of-concept exploit examples for reports or live demonstrations in controlled, authorized environments.
Experience mentoring junior penetration testers or leading small offensive security workstreams.
Excellent oral and written communication and presentation skills.

View full job page →

1mo ago

Senior Cyber Security Engineer

ASRC Federal Beltsville, MD

Beltsville, MD

1mo ago Closed

$111k - $180k/yr Full time Senior Cyber Security Cybersecurity Tools

This position is no longer accepting applications (closed Nov 3, 2026).

Job Description

ASRC Federal is hiring a Senior Cyber Security Engineer for the Shared Services team supporting enterprise security engineering and operations.

Responsibilities

Operate and maintain enterprise vulnerability and compliance scanning platforms, including scan policies, repositories, asset groups, credentials, schedules, and reporting.
Conduct vulnerability assessments, security configuration assessments, and compliance scans to identify, prioritize, and drive remediation of security weaknesses.
Perform DISA STIG benchmarking, analyze results, execute technical adjudications, and document remediation plans or applicable exceptions.
Manage and optimize security technologies including EDR/EPP/XDR and SIEM, and remediate gaps across coverage, configuration, logging, and telemetry.
Investigate and respond to security alerts involving phishing, malicious URLs, malware, credential compromise, suspicious authentication activity, and endpoint threats.
Act as a Tier II/Tier III escalation point for complex investigations, engineering issues, and cybersecurity incidents.
Support incident response activities across triage, containment, eradication, recovery, and root cause analysis.
Maintain a strong understanding of Windows and enterprise infrastructure, including Active Directory, Group Policy Objects (GPOs), permissions, authentication, authorization, and access controls.
Support security engineering and assessment activities across Microsoft Azure and Microsoft 365, including GCC and GCC High where applicable.
Develop automation and scripting using PowerShell, Python, or similar technologies for security operations, vulnerability management, assessment, and response.
Collaborate with infrastructure, networking, endpoint, identity, cloud, and application teams during investigations, assessments, and remediation efforts.
Document technical findings, assessment results, incident timelines, remediation recommendations, and risk-based adjudications.
Develop and maintain security metrics, KPIs, dashboards, and on-demand reports to communicate security posture, trends, risks, and operational performance.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience.
9+ years hands-on experience in vulnerability scanning, compliance assessments, STIG benchmarking, security configuration assessments, and technical adjudication.
Must be a U.S. Citizen or Permanent Resident (Green Card Holder).
Experience in cybersecurity engineering, vulnerability management, security operations, incident response, or related areas.
Strong knowledge of Windows operating systems and enterprise Windows architecture (Active Directory, GPOs, permissions, authentication, authorization, access control).
Strong understanding of TCP/IP, DNS, HTTP/S, VPNs, firewalls, and enterprise network architecture.
Experience with endpoint security technologies such as EDR, EPP, or XDR.
Proficiency in PowerShell; experience with Python or similar scripting preferred.
Strong analytical, troubleshooting, documentation, and communication skills.
Ability to work independently and collaboratively in a fast-paced enterprise environment.
At least one required certification: CISSP, GCIH, GCIA, Security+, CEH, or equivalent.

Technologies

PowerShell, Python
EDR, EPP, XDR
SIEM
Tenable Security Center, Tenable Vulnerability Management
DISA STIGs, SCAP
STIG adjudication
Defender for Endpoint, Defender for Identity, Defender for Office 365
Microsoft Sentinel
Microsoft Azure, Microsoft 365
GCC, GCC High
MITRE ATT&CK, SOAR
TCP/IP, DNS, HTTP/S, VPNs, firewalls
Windows, Active Directory, Group Policy Objects (GPOs)
CMMC, NIST 800-53, NIST 800-171, FedRAMP

Preferred Qualifications

Experience with Tenable Security Center/Tenable Vulnerability Management, including enterprise architecture, repositories, asset tagging, scan configuration, credentialed scanning, and compliance scanning.
Experience with DISA STIGs, SCAP, security benchmarks, and STIG adjudication.
Experience with Microsoft security technologies such as Defender for Endpoint, Defender for Identity, Defender for Office 365, and Microsoft Sentinel.
Experience with Microsoft Azure, Microsoft 365, GCC, and GCC High security configurations.
Experience with MITRE ATT&CK, threat intelligence platforms, SOAR, or security automation.
Experience supporting cybersecurity frameworks such as CMMC, NIST 800-53, NIST 800-171, FedRAMP, or DISA security requirements.

Work Location

Hybrid/Primarily Remote (at least 2 days onsite)
Shared Services team in Beltsville, MD

Compensation

USD 111,000 - 180,000 per year

Benefits

Health care
Dental
Vision
Life insurance
401(k)
Education assistance
Paid time off including PTO, holidays, and any other paid leave required by law

ASRC Federal and its Subsidiaries are Equal Opportunity employers.

View full job page →

2mo ago

Cybersecurity Integration Engineer

Peraton Beltsville, MD

Beltsville, MD

2mo ago Closed

$86k - $138k/yr Full time Cybersecurity Integration Cybersecurity Tools Data Security

This position is no longer accepting applications (closed Sep 14, 2026).

Job Description

Peraton is hiring a Cybersecurity Integration Engineer for Federal Strategic Cyber Programs to assess, test, integrate, and transition cybersecurity solutions into enterprise security operations in a hybrid work environment.

Responsibilities

Assess, test, and integrate cybersecurity tools to support and enhance enterprise security operations
Perform system builds, installations, and functional testing for new cybersecurity technologies
Transition integrated solutions to Operations & Maintenance (O&M) teams
Develop and maintain technical documentation, including network diagrams and configurations
Provide engineering input and task estimates for cybersecurity integration efforts
Support cybersecurity risk assessments and recommend mitigation strategies
Collaborate with cybersecurity, network, and infrastructure teams to integrate solutions
Provide engineering support for Tenable vulnerability scanning and reporting tools
Monitor and evaluate emerging cybersecurity technologies for potential adoption

Requirements

Bachelor’s degree and minimum 5 years of relevant experience, or 3 years with a Master’s degree
4 additional years of relevant experience may substitute for the degree requirement
Must currently hold one of the following professional certifications (or obtain one prior to start date), with continued certification required: CAP, CASP+ CE, CCISO, CCNA-Security, CISM, CISSP (or Associate), CND, CSSLP, CySA+, GICSP, GSEC, GSLC, Security+ CE, SSCP, PPDA, Agile IC, SNOW App Dev
Demonstrated cybersecurity engineering experience, including tool integration and system hardening
Experience with RHEL Linux and Azure DevOps (Git)
Hands-on experience integrating, testing, and deploying solutions in enterprise environments
Experience supporting cloud environments such as Azure
Networking experience
Knowledge of cybersecurity frameworks and standards: NIST 800-53, RMF, FISMA
Expertise in enterprise networking protocols and concepts: TCP/IP, SMB, SFTP, DNS, DHCP, SSL, plus understanding of Layer 2/3 architectures across hybrid cloud and on-prem environments
Ability to diagnose and resolve complex network issues using advanced tools (e.g., Wireshark, tcpdump, traceroute, Splunk) in distributed systems and multi-vendor environments
U.S. citizenship required
Active Secret security clearance and ability to obtain a final Top Secret security clearance

Technologies

Tenable
RHEL Linux
Azure DevOps (Git)
Azure
NIST 800-53, RMF, FISMA
TCP/IP, SMB, SFTP, DNS, DHCP, SSL
Wireshark, tcpdump, traceroute, Splunk
Python, Bash, PowerShell
Terraform
Infrastructure as Code (IaC)
SAFe Agile

Preferred Qualifications

Experience with enterprise cybersecurity tools and platforms (e.g., Tenable, Splunk)
Familiarity with vulnerability management processes and remediation workflows
Ability to create and maintain technical documentation, including network diagrams and configuration guides
Proficiency with Infrastructure as Code (IaC) tools such as Terraform
Strong system integration experience, including testing, validation, and deployment of security solutions
Familiarity with NIST cybersecurity frameworks, RMF, and FISMA compliance
Experience supporting vulnerability management programs and integrating scanning tools into enterprise workflows
Knowledge of secure cloud architecture and migration strategies
Strong scripting skills (Python, Bash, PowerShell) for automation and tool integration
Excellent communication and collaboration skills across multidisciplinary teams
Ability to manage multiple priorities and deliver high-quality results in a fast-paced environment
SAFe Agile certification
Experience with cybersecurity programs

Location and Work Schedule

Beltsville, MD (hybrid)
Additional location listed: Rosslyn, VA
Hybrid (On-site & Remote)

Schedule and Salary

Target salary range: USD 86,000 - 138,000 per yearly

Benefits

Medical, Dental, Vision
Life
Health savings account
Short/long term disability
EAP
Parental leave
401(k)
Paid time off (PTO) for vacation
Company paid holidays

Application Details

Application period estimated at 30 days from the job posting date
During review, you may be required to participate in an on-camera interview and a process to verify identity

View full job page →

Cybersecurity Jobs in Beltsville, MD

Senior Penetration Tester

Pentest Operator / Penetration Tester

Senior Cyber Security Engineer

Cybersecurity Integration Engineer

Get Cybersecurity Jobs in Beltsville, MD alerts