Mid-Level Penetration Tester
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Mid-Level Penetration Tester conducting authorized assessments for a cybersecurity and IT consulting firm serving federal agencies and Fortune 100 enterprises. Testing networks, applications, infrastructure, and vulnerabilities remotely.
Responsibilities:
- Plan and execute authorized penetration tests across network, endpoint, wireless, database, application, and infrastructure environments
- Follow structured Planning, Discovery, Testing, and Reporting phases
- Develop and tailor Rules of Engagement, Execution Plans, daily status updates, and final reporting inputs
- Coordinate with system owners, SOC personnel, and other stakeholders on scope, test windows, prerequisites, safety thresholds, and stop/pause procedures
- Validate vulnerabilities arising from misconfigurations, outdated software, weak access controls, incomplete control implementation, and exploitable attack paths
- Support validation of CISA WAS, CISA FAST, KEV exposure, and external-facing asset findings
- Coordinate retesting to confirm closure
- Use approved automated and AI-enabled tools to improve reconnaissance, testing efficiency, ATT&CK/ATLAS mapping, evidence development, and reporting while maintaining human oversight
- Mentor junior testing staff
- Independently lead assessments with minimal oversight
Requirements:
- U.S. Citizenship or Permanent Residency required for this federal engagement
- Approximately 5 to 8 years of experience conducting or leading penetration testing engagements
- Demonstrated ability to plan and execute assessments across network, endpoint, wireless, database, application, and infrastructure environments
- Experience developing Rules of Engagement, Execution Plans, and formal, decision-ready reporting for stakeholders
- Experience coordinating directly with system owners and SOC personnel on scope, safety thresholds, and stop/pause procedures
- Ability to work fully remote with reliable, secure connectivity
- Previous federal contracting experience preferred
- Experience with CISA WAS, CISA FAST, and KEV validation and retest workflows preferred
- Familiarity with MITRE ATT&CK and ATLAS mapping preferred
- Advanced certifications such as OSCP, OSCE, GPEN, or GXPN preferred
- Experience integrating AI-enabled tools into testing workflows while maintaining human oversight of results preferred
Benefits:
- Medical, multiple POS health plan options including an HSA-compatible plan
- Dental, PPO coverage for preventive, basic, and major services
- Vision, annual exam, frames, lenses, and contact lens allowance
- 401(k) with employer match up to 5% of eligible compensation
- Long-Term Disability, 100% employer-paid coverage at 50% of pre-disability earnings
- Life Insurance and AD&D, 100% employer-paid coverage valued at $10,000 each
- 15 to 25 PTO days annually based on tenure
- All 11 federal holidays observed
Similar Jobs
Penetration Tester
Penetration Testing Analyst supporting authorized assessments for federal agencies. Conducting reconnaissance, evidence collection, triage, and reporting at Dragonfli Group, a cybersecurity and IT consulting firm.
QA / Test Coordinator, Italian
QA/Test Coordinator coordinating Salesforce testing, defect management, and quality governance. Xebia delivers AI, cloud, data, and digital transformation solutions for global clients.
QA Lead – Betting
QA Lead driving automated testing, CI/CD quality, and Agile/DevOps practices for Opinov8 software projects. Mentoring QA teams and improving automation coverage across impactful international projects.
AI Assisted QA Lead
AI-assisted QA Lead owning test strategy, automation, and quality metrics for OutForce’s SaaS clients. Using AI tools to accelerate testing and resolve defects with engineering.
QA Compliance Manager – Clinical Trials
QA Compliance Manager overseeing GxP audits, regulatory inspections, and CAPA activities for Thermo Fisher Scientific’s clinical research programs across APAC.
Senior MacOS QA Engineer
Senior macOS QA Engineer validating secure platform stability, security, and compatibility. Investigating system extensions, operating-system behavior, and complex macOS regressions remotely across Europe.
Senior MacOS QA Engineer
Senior macOS QA Engineer validating secure macOS platforms, system extensions, and compatibility. Investigating low-level security issues for teams across Latin America.
Software Tester, QA Analyst – Smart Grid Platform
Softwaretester / QA Analyst testing VENIOS’s real-time smart-grid platform. Developing test cases, validating releases, and tracking defects across German-speaking remote teams.
Penetration Tester – UK
Penetration Tester conducting network, application, API, mobile, and cloud security assessments for Cognisys, a global cybersecurity company. Delivering client-facing findings, reports, and remediation guidance.
Software and Data Quality Assurance Analyst I
Software QA analyst testing NCCPA applications through functional, regression, manual, and automated testing. Supporting defect resolution, acceptance testing, deployments, and quality control.
Quality Assurance Engineer II
Quality Assurance Engineer II testing Ad Hoc’s digital government services for the Library of Congress. Automating functional, accessibility, API, and CI/CD testing in a remote agile environment.
QA Test Automation – Mid-Level
QA Test Automation specialist at Compass UOL, a digital transformation and AI services firm. Planning manual and automated testing, API performance, integration, and CI/CD quality processes.
Associate Penetration Tester
Associate Penetration Tester conducting network, application, and social engineering tests for FRSecure, an information security consultancy. Documenting vulnerabilities and advising clients on remediation.
QA Engineer
QA Engineer ensuring functional quality through Playwright-based regression and E2E automation. Supporting ARKHO’s digital transformation, AI, data, and managed services offerings.
Clinical Quality Assurance Coordinator
Clinical Quality Assurance Coordinator reviewing peer-review reports for MES Solutions, a provider of independent medical examinations and peer-review services. Ensuring clinical accuracy, regulatory compliance, and report quality remotely.
QA Lead
QA Lead validating settlement integrity, payment flows, and RPC security for an AI-driven real-money platform. Building traceable test coverage and leading a QA pod.
Quality Assurance Analyst
Quality Assurance Analyst auditing files, communications, and processes for Dovenmuehle, a mortgage subservicing firm. Analyzing compliance findings and recommending corrective actions and process improvements.
Senior QA Engineer – Mobile, Web
Senior QA Engineer owning release readiness for React Native mobile and React web products. Investigating defects with SQL, APIs, logs, and application code.
Principal Software Tester
Software Tester Principal building Playwright UI and API test automation for SAIC’s defense, space, intelligence, and civilian technology solutions. Supporting CI/CD quality, defect tracking, and testing standards.
Senior Software Tester
Senior Software Tester automating UI and API quality assurance for SAIC’s mission-critical technology solutions. Building Playwright frameworks and supporting CI/CD release quality.