Penetration Tester

We are looking for an experienced Penetration Tester to support a federal-environment security team in Woodlawn, MD. You will perform web application, infrastructure, and network penetration testing, run vulnerability assessments and risk analyses, and contribute to security testing across multiple environments.

Job Description:

You will perform web application, infrastructure and network testing, conduct vulnerability assessments and risk analyses, and contribute to comprehensive security testing across environments.

Key Skills Required:

• Web Application Penetration Testing: Deep expertise in identifying and exploiting OWASP Top 10 vulnerabilities (e.g., injection flaws, broken auth, SSRF, insecure deserialization) using manual techniques and proxy tools (Burp Suite Pro).
• Infrastructure & Network Penetration Testing: Hands-on experience testing internal and external network perimeters, Active Directory/IAM configurations, hypervisors, and server hardening.
• Vulnerability Assessment & Risk Analysis: Proficiency with standard vulnerability scanners, threat modeling frameworks, and translating technical risks into business context.
• Security Testing: Experience embedding security testing methodologies throughout the software development lifecycle (SDLC).

Must-Have Qualifications:

• Active OSCP Certification (Offensive Security Certified Professional): Mandatory requirement.
• Bachelor’s Degree: In Computer Science, Information Security, Cybersecurity, or a related technical field.
• Public Trust Clearance: May hold/obtain active public trust clearance status.