Senior Penetration Tester

Senior Penetration Tester

Location: Remote / Occasional travel to DC when needed

Duration: 5 Years

8–12+ years penetration testing and security assessment

Penetration testing, exploit validation, web/network testing, vulnerability reporting

Required Skills:

• Extensive experience leading authorized penetration testing, ethical hacking, red team assessments, and technical security testing across enterprise networks, applications, cloud environments, and infrastructure.
• Advanced hands-on experience with penetration testing tools such as Burp Suite, Metasploit, Nmap, Nessus, Kali Linux, Wireshark, and similar security assessment platforms.
• Expertise in web application and API penetration testing, OWASP Top 10 vulnerabilities, authentication weaknesses, privilege escalation, and security misconfiguration analysis.
• Experience conducting internal and external network penetration testing, Active Directory security assessments, cloud penetration testing, and controlled exploitation of identified vulnerabilities.
• Strong understanding of NIST SP 800-115, NIST SP 800-53A, MITRE ATT&CK, OWASP testing methodologies, and CISA High Value Asset assessment practices.
• Ability to develop penetration testing methodologies, rules of engagement, assessment schedules, test plans, and technical testing procedures.
• Experience preparing detailed penetration testing reports, risk-rated findings, proof-of-concept evidence, remediation recommendations, and executive-level assessment summaries.
• Proven ability to lead penetration testing teams, coordinate with System Owners and security assessors, validate remediation actions, and support federal security authorization activities.