Senior Cybersecurity Penetration Tester

ASRC Federal Holding Company • Quantico, VA • 2d ago

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work

ASRC Federal is actively hiring a Senior Cybersecurity Penetration Tester in support of our Defense Counterintelligence Security Agency (DCSA) program based out of Quantico VA.

Remote flexibility available! Telework offered with a requirement to be onsite up to two (2) days a week at Quantico Marine Corps Base VA.

Position Description:

The Cybersecurity Penetration Tester is a hands-on technical role responsible for conducting simulated attacks on systems and networks to identify vulnerabilities and weaknesses that could be exploited by malicious actors. This role requires a deep understanding of security principles, hacking techniques, and attack methodologies. The Penetration Tester will plan, execute, and document penetration tests, provide recommendations for remediation, and contribute to the overall improvement of the organization's security posture.

Minimum Requirements:

Minimum of 5 - 7 years of experience in security principles such as attack frameworks, threat landscapes, and attacker tactics, techniques and procedures.

Proven experience conducting penetration tests of web applications, networks, and other systems.

Experience with a variety of penetration testing tools and techniques (e.g., Rapid7 Nexpose, Appspider Pro, Metasploit, Cobalt Strike and/or Burp Suite).

Active Top-Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI

Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Must meet 8570 certification requirements at the time of hire. IAT II Information Assurance Baseline (e.g., CASP+ CE, CCMP Security, CISA, CISSP, GCED, GCIH, Security+ CE or CCSP) In addition to the IA baseline, a CSSP Auditor cert is preferred (e.g., CEH, CySA+, CISA, GSNA, CFR or PenTest)

Responsibilities:

Penetration Testing:

Conduct penetration tests of web applications, mobile applications, networks, cloud environments, and other systems.

Utilize a variety of tools and techniques to identify vulnerabilities, including SQL injection, cross-site scripting (XSS), buffer overflows, and other common attack vectors.

Perform reconnaissance to gather information about target systems and networks.

Develop and execute exploit code to demonstrate the impact of identified vulnerabilities.

Bypass security controls and evade detection.

Vulnerability Assessment:

Perform vulnerability assessments using automated scanning tools and manual techniques.

Analyze scan results to identify false positives and prioritize vulnerabilities.

Develop custom scripts and tools to automate vulnerability assessment tasks.

Reporting and Documentation:

Document all findings in detailed and comprehensive reports, including descriptions of vulnerabilities, methods used to exploit them, and recommendations for remediation.

Present findings to stakeholders, including technical teams and management.

Create and maintain documentation on penetration testing methodologies, tools, and techniques.

Remediation Support:

Provide guidance and technical assistance to system owners and developers on vulnerability remediation.

Validate remediation efforts to ensure that vulnerabilities have been properly addressed.

Conduct retests to verify the effectiveness of implemented security controls.

Research and Development:

Stay up-to-date on the latest security threats, vulnerabilities, and attack techniques.

Research and evaluate new penetration testing tools and methodologies.

Develop custom tools and scripts to enhance penetration testing capabilities.

Contribute to the development of security policies and procedures.

Collaboration:

Collaborate with other cybersecurity professionals, including security architects, incident responders, and security engineers.

Share knowledge and expertise with team members.

Participate in security training and awareness programs.

Ethical Hacking:

Conduct all penetration testing activities in a legal and ethical manner, adhering to established rules of engagement.

Protect the confidentiality and integrity of sensitive data.

Respect the privacy of users and systems.

Work Environment and Physical Demands:

This is primarily a Telework position with a requirement to be onsite up to two (2) days a week

If alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connection

Must be able to communicate complex technical ideas to a diverse customer base both verbally and in written form

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law.

EEO Statement

ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.

Job Details

Job Family Information Technology

Job Function Cyber Security

Pay Type Salary

Education Level Bachelor's Degree

Similar Jobs

Subject Matter Expert II (RF Engineer)

NANA Regional Corporation • Alexandria, VA • 2h ago

IT & Engineering

ASE is looking to hire an RF engineer as technical authority and subject matter expert exploring new technologies for immediate insertion to Coast Guard programs. The person for this position will research new sensor tec...

2h ago

Go to Apply

SUPERVISORY IT CYBERSECURITY SPECIALIST (INFOSEC)

Defense Threat Reduction Agency • Fort Belvoir, VA • 3h ago

IT & Engineering

Summary This position may be filled using Direct Hire Authority: Z5CAV/Direct-Hire Authority (Certain DoD Personnel) PL 118-31, Sec 125OB (i)(2), 12/22/2023. This position is being filled under the memorandum from the Un...

3h ago

Go to Apply

Accessibility and Inclusion Coordinator (Park/Rec Specialist IV)

FAIRFAX COUNTY • Fairfax, VA • 4h ago

IT & Engineering

We are looking for a highly motivated individual with a passion for public service and a desire to support a wide range of therapeutic recreation services within a large agency. Under general supervision of the Therapeut...

4h ago

Go to Apply

HVAC and Plumbing Quality Control Engineer (Engineer II)

FAIRFAX COUNTY • Fairfax, VA • 16h ago

IT & Engineering

This job opportunity is being re-announced. Applicants who wish to revise their original application are encouraged to reapply with a revised application. Otherwise, all applicants who previously applied do not need to r...

16h ago

Go to Apply

Mechanical Engineer (Engineer IV)

FAIRFAX COUNTY • Fairfax, VA • 16h ago

IT & Engineering

$5,000 Signing Bonus* This position provides senior level leadership and is responsible for the overall development and management of large scale and/or multiple complex capital and non-capital projects for and in occupi...

16h ago

Go to Apply

Automatic Door Technician

Lane Valente Industries • Alexandria, VA • 16h ago

IT & Engineering

Lane Valente Industries is a Leading International construction and facility maintenance company with offices throughout the U.S. and Canada. We have a strong in-house group of field technicians that services top U.S. co...

16h ago

Go to Apply

Electrical Drafter

Actalent • Fairfax, VA • 1d ago

IT & Engineering

Job Title: Electrical DrafterJob Description We are seeking a skilled BIM Coordinator/Electrical Drafter or Designer to join our team and support our ongoing projects. You will play a critical role in modeling electrical...

1d ago

Go to Apply

Intern - Dry Etch Equipment Engineer

Micron Technology, Inc. • Manassas, VA • 1d ago

IT & Engineering

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into int...

1d ago

Go to Apply

Front End Engineer Senior

General Dynamics Information Technology • Fairfax, VA • 1d ago

IT & Engineering

Req ID: RQ210533 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: None Public Trust/Other Required: Other Job Family: Software Engineering Skills: Collaboration,JavaScript,Node.js Development,Web Appl...

1d ago

Go to Apply

Web Developer

General Dynamics Information Technology • Fairfax, VA • 1d ago

IT & Engineering

Req ID: RQ211714 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: None Public Trust/Other Required: MBI (T2) Job Family: Software Engineering Skills: Angular,Full Stack Development,React.js,RESTful We...

1d ago

Go to Apply

Subscribe to get new jobs sent directly to you
(no charge, cancel anytime)

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.