Penetration Tester

Job Summary:

The Lead Penetration Tester will spearhead both external and internal penetration testing initiatives, focusing on operational technology (OT) infrastructure and adversary simulation exercises. This role involves assessing security postures, validating exploit techniques, and enhancing detection and response capabilities within hybrid environments.

Responsibilities:

• Lead external and internal penetration testing activities.
• Perform gray-box security assessments of OT infrastructure.
• Execute adversary simulations and exploit validation.
• Assess externally exposed services, authentication mechanisms, and attack paths.
• Perform lateral movement and privilege escalation testing.
• Validate SOC detection, monitoring, and response capabilities.
• Document findings, proof-of-concepts, attack paths, and remediation recommendations.
• Map findings to MITRE ATT&CK for ICS and industry security frameworks.

Required Skills & Certifications:

• Ethical hacking expertise.
• Experience with OT security testing.
• Proficiency in internal and external penetration testing.
• Adversary simulation capabilities.
• Vulnerability exploitation and assessment skills.
• Certifications such as CEH, OSCP, and Security+.
• Minimum of 5 years of relevant experience.

Preferred Skills & Certifications:

• Familiarity with MITRE ATT&CK framework for ICS.
• Experience with SOC validation and monitoring tools.

Special Considerations:

• Hybrid work location based in Virginia.
• Engagement duration of 3 months.

Scheduling:

• Work schedule aligned with hybrid onsite and remote requirements.