Penetration Tester

We are looking for an experienced Penetration Tester to support a federal-environment security team in Woodlawn, MD . You will perform web application, infrastructure, and network penetration testing, run vulnerability assessments and risk analyses, and contribute to security testing across multiple environments.

Job Description:

You will perform web application, infrastructure and network testing, conduct vulnerability assessments and risk analyses, and contribute to comprehensive security testing across environments.

Key Skills Required:

• Web Application Penetration Testing: Deep expertise in identifying and exploiting OWASP Top 10 vulnerabilities (e.g., injection flaws, broken auth, SSRF, insecure deserialization) using manual techniques and proxy tools (Burp Suite Pro).
• Infrastructure & Network Penetration Testing: Hands-on experience testing internal and external network perimeters, Active Directory/IAM configurations, hypervisors, and server hardening.
• Vulnerability Assessment & Risk Analysis: Proficiency with standard vulnerability scanners, threat modeling frameworks, and translating technical risks into business context.
• Security Testing: Experience embedding security testing methodologies throughout the software development lifecycle (SDLC).

Must-Have Qualifications:

• Active OSCP Certification (Offensive Security Certified Professional): Mandatory requirement.
• Bachelor’s Degree: In Computer Science, Information Security, Cybersecurity, or a related technical field.
• Public Trust Clearance: May hold/obtain active public trust clearance status.