Penetration Tester
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Penetration Testing Analyst supporting authorized assessments for federal agencies. Conducting reconnaissance, evidence collection, triage, and reporting at Dragonfli Group, a cybersecurity and IT consulting firm.
Responsibilities:
- Support assessment planning by maintaining test schedules, scope records, stakeholder coordination notes, and required pre-assessment documentation
- Assist with controlled discovery, enumeration, testing support, and evidence capture within approved authorization boundaries
- Document findings, affected assets, ownership, reproducibility details, remediation recommendations, and retest requirements for final reports
- Support validation and triage of external-facing asset findings, CISA WAS and FAST results, KEV exposure items, and VDP submissions
- Coordinate daily status inputs, meeting notes, action tracking, and after-action support for assigned testing activities
- Use approved automation and AI-enabled tools to improve data collection, initial correlation, draft reporting, and testing workflow efficiency
- Provide analytical and hands-on support for authorized penetration testing activities for a large federal agency
Requirements:
- U.S. Citizenship or Permanent Residency required for this federal engagement
- Approximately 2 to 4 years of experience in penetration testing, vulnerability assessment, or a related offensive/defensive cybersecurity role
- Working knowledge of common penetration testing methodologies and tools, such as Burp Suite, Nmap, Metasploit, or equivalents
- Familiarity with reconnaissance, enumeration, and evidence collection within authorized testing boundaries
- Strong written documentation skills for findings, reproducibility steps, and remediation recommendations
- Ability to work fully remote with reliable, secure connectivity
- Previous federal contracting experience preferred
- Exposure to CISA Web Application Scanning (WAS) and Fast Attack Surface Testing (FAST) programs preferred
- Familiarity with Known Exploited Vulnerabilities (KEV) catalog and Vulnerability Disclosure Program (VDP) triage preferred
- Relevant certifications such as Security+, CEH, GPEN, or OSCP, or actively pursuing, preferred
- Experience using AI-enabled or automation tools to support testing and reporting workflows preferred
- Strong written and verbal communication
- Attention to detail and thorough documentation habits
- Ability to work independently in a remote, distributed team
- Collaborative coordination with stakeholders and testing leads
- Time management across concurrent assessment activities
- All work related to this role must be performed within the continental U.S.
Benefits:
- Medical, Multiple POS health plan options including an HSA-compatible plan
- Dental, PPO coverage for preventive, basic, and major services
- Vision, Annual exam, frames, lenses, and contact lens allowance
- 401(k), Employer match up to 5% of eligible compensation
- Long-Term Disability, 100% employer-paid coverage at 50% of pre-disability earnings
- Life Insurance and AD&D, 100% employer-paid coverage valued at $10,000 each
- PTO, 15 to 25 days annually based on tenure
- Paid Federal Holidays, All 11 federal holidays observed
- Fully remote work arrangement
Similar Jobs
Mid-Level Penetration Tester
Mid-Level Penetration Tester conducting authorized assessments for a cybersecurity and IT consulting firm serving federal agencies and Fortune 100 enterprises. Testing networks, applications, infrastructure, and vulnerabilities remotely.
QA / Test Coordinator, Italian
QA/Test Coordinator coordinating Salesforce testing, defect management, and quality governance. Xebia delivers AI, cloud, data, and digital transformation solutions for global clients.
QA Lead – Betting
QA Lead driving automated testing, CI/CD quality, and Agile/DevOps practices for Opinov8 software projects. Mentoring QA teams and improving automation coverage across impactful international projects.
AI Assisted QA Lead
AI-assisted QA Lead owning test strategy, automation, and quality metrics for OutForce’s SaaS clients. Using AI tools to accelerate testing and resolve defects with engineering.
QA Compliance Manager – Clinical Trials
QA Compliance Manager overseeing GxP audits, regulatory inspections, and CAPA activities for Thermo Fisher Scientific’s clinical research programs across APAC.
Senior MacOS QA Engineer
Senior macOS QA Engineer validating secure platform stability, security, and compatibility. Investigating system extensions, operating-system behavior, and complex macOS regressions remotely across Europe.
Senior MacOS QA Engineer
Senior macOS QA Engineer validating secure macOS platforms, system extensions, and compatibility. Investigating low-level security issues for teams across Latin America.
Software Tester, QA Analyst – Smart Grid Platform
Softwaretester / QA Analyst testing VENIOS’s real-time smart-grid platform. Developing test cases, validating releases, and tracking defects across German-speaking remote teams.
Penetration Tester – UK
Penetration Tester conducting network, application, API, mobile, and cloud security assessments for Cognisys, a global cybersecurity company. Delivering client-facing findings, reports, and remediation guidance.
Software and Data Quality Assurance Analyst I
Software QA analyst testing NCCPA applications through functional, regression, manual, and automated testing. Supporting defect resolution, acceptance testing, deployments, and quality control.
Quality Assurance Engineer II
Quality Assurance Engineer II testing Ad Hoc’s digital government services for the Library of Congress. Automating functional, accessibility, API, and CI/CD testing in a remote agile environment.
QA Test Automation – Mid-Level
QA Test Automation specialist at Compass UOL, a digital transformation and AI services firm. Planning manual and automated testing, API performance, integration, and CI/CD quality processes.
Associate Penetration Tester
Associate Penetration Tester conducting network, application, and social engineering tests for FRSecure, an information security consultancy. Documenting vulnerabilities and advising clients on remediation.
QA Engineer
QA Engineer ensuring functional quality through Playwright-based regression and E2E automation. Supporting ARKHO’s digital transformation, AI, data, and managed services offerings.
Clinical Quality Assurance Coordinator
Clinical Quality Assurance Coordinator reviewing peer-review reports for MES Solutions, a provider of independent medical examinations and peer-review services. Ensuring clinical accuracy, regulatory compliance, and report quality remotely.
QA Lead
QA Lead validating settlement integrity, payment flows, and RPC security for an AI-driven real-money platform. Building traceable test coverage and leading a QA pod.
Quality Assurance Analyst
Quality Assurance Analyst auditing files, communications, and processes for Dovenmuehle, a mortgage subservicing firm. Analyzing compliance findings and recommending corrective actions and process improvements.
Senior QA Engineer – Mobile, Web
Senior QA Engineer owning release readiness for React Native mobile and React web products. Investigating defects with SQL, APIs, logs, and application code.
Principal Software Tester
Software Tester Principal building Playwright UI and API test automation for SAIC’s defense, space, intelligence, and civilian technology solutions. Supporting CI/CD quality, defect tracking, and testing standards.
Senior Software Tester
Senior Software Tester automating UI and API quality assurance for SAIC’s mission-critical technology solutions. Building Playwright frameworks and supporting CI/CD release quality.