Cybersecurity Engineer and Penetration Tester

$60,400 - $137,000/Yr

Booz Allen Hamilton - Herndon, VA

Part-time,Full-time - Entry Level

Herndon, VA

Professional, Scientific, and Technical Services

About the position

As a Cybersecurity Engineer and Penetration Tester, you will play a critical role in identifying potential vulnerabilities within computer systems, applications, servers, and networks. Utilizing advanced penetration testing tools and techniques, you will ensure the security of these systems while developing innovative solutions to complex security challenges. Your responsibilities will include working independently with minimal direction, mentoring and supervising team members, and applying your extensive technical expertise and industry knowledge to enhance the security posture of the organization. You will be expected to leverage adversarial tactics to conduct hands-on security testing, perform network security analysis, and develop risk and threat mitigation plans. This position requires a proactive approach to cybersecurity, with a focus on continuous improvement and adaptation to emerging threats.

Responsibilities

• Identify vulnerabilities in computer systems, applications, servers, and networks using penetration testing tools and techniques.
• Develop innovative solutions to complex cybersecurity problems.
• Mentor and supervise team members in cybersecurity practices and methodologies.
• Conduct hands-on security testing leveraging adversarial tactics.
• Perform network security analysis, including software or traffic analysis.
• Develop risk and threat mitigation plans based on findings from penetration tests.

Requirements

• 1+ years of experience with cyber penetration testing or developing risk and threat mitigation plans.
• 1+ years of experience operating in Linux, Windows, and virtual platforms.
• 1+ years of experience with computer attack methods and system exploitation techniques.
• 1+ years of experience leveraging adversarial tactics to conduct hands-on security testing.
• 1+ years of experience performing network security analysis, including software or traffic analysis.
• TS/SCI clearance with a polygraph.
• HS diploma or GED.

Nice-to-haves

• Experience with manually auditing source code, including Java, Ruby, Python, JavaScript, Rust, or C, to find security issues.
• Bachelor's degree in CS, Information Systems, Engineering, or a related field.
• Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), HTB Certified Penetration Tester Specialist (CPTS), eLearnSecurity Junior Penetration Tester (EJPT), GIAC Global Information Assurance Penetration Tester (GPEN), or GIAC Cloud Penetration Tester Certification.

Benefits

• Wellness programs with HSA contributions.
• Paid holidays.
• Paid parental leave.
• Generous 401(k) match.
• Flexible schedules and remote/hybrid work options.
• Tuition reimbursement and professional development opportunities.