Penetration Tester

Provides penetration testing support to the Agency's information systems in support of Security Controls Assessments, Accreditation activities, continuous monitoring, and FISMA requirements, including specialized wireless, RF, mobile application, and High Value Asset (HVA) assessments. Every engagement begins with a Rules of Engagement (ROE) package submitted for Government approval and ends with a detailed findings report delivered to the System Owner, ISSM/ISSO, Government lead, and the Agency's SOC/VAT Manager to support remediation and retesting. The role also supports Adversarial Assessments — including Cyber Table-Top (CTT) scenarios and Cooperative Vulnerability Penetration Assessments (CVPA) — conducted jointly with the SOC, CTI, and CDF teams to emulate real-world IOCs, TTPs, and CWEs. Testing frequently requires CONUS/OCONUS travel to the Agency's facilities nationwide, including Puerto Rico and Guam, for onsite wireless, RF, and physical-security assessments.

Role Description

• Perform penetration testing as requested by Components/System Owners/ISSM/ISSO; prepare and submit Rules of Engagement (ROE) for Government approval prior to testing.
• Deliver detailed findings/recommendations reports to System Owners, ISSM/ISSO, Government lead, and the Agency's VAT/SOC Manager; archive data to support remediation and retesting.
• Conduct wireless access point assessments (IEEE 802.11) and RF assessments (~300 MHz–6 GHz) at the Agency's sites nationwide, including Puerto Rico and Guam, maintaining a master travel/assessment schedule.
• Perform mobile application assessments and Non-Tier 1 HVA assessments, including the CISA Operator Role portion, generating reports in CISA-prescribed format.
• Support Adversarial Assessments (AA): initial engagement meetings, Cyber Table-Top (CTT) scenario creation/execution, and Cooperative Vulnerability Penetration Assessments (CVPA).
• Conduct assessments jointly with SOC/CTI/CDF to discover or emulate IOCs, TTPs, and CWEs.
• Travel CONUS/OCONUS as needed to perform onsite security assessments of the Agency's facilities, systems, and applications.
• Maintain a repository and metrics tracking of past penetration tests; support annual ISSO training on VAT services/capabilities.

Basic Qualifications:

• Minimum 7 years of professional experience in penetration testing and offensive security assessment; or, with a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field 5 years of such experience.
• Hands-on experience with penetration testing methodologies, wireless/RF assessment tools, mobile application security testing, and CISA HVA assessment procedures.

Preferred Certifications:

• OSCP (Offensive Security Certified Professional)
• GPEN (GIAC Penetration Tester)
• CEH (Certified Ethical Hacker)