Penetration Tester II

Silosmashers - Arlington, VA

Full-time - Mid Level

Remote - Arlington, VA

Professional, Scientific, and Technical Services

About the position

SiloSmashers is seeking a Penetration Tester II to identify and exploit vulnerabilities in systems and networks, providing critical analysis on security impacts. This role involves serving as a principal security advisor on risk matters, particularly for CISA CSD information systems, and requires collaboration with various stakeholders to ensure comprehensive security assessments.

Responsibilities

• Perform host, network, cloud, and application-based penetration test assessments.
• Create and update the master schedule of all security assessments and deliver it to the Government for approval.
• Develop standard operating procedures, security test plans, assessment schedules, and Rules of Engagement for stakeholders' assessment results and recommendations.
• Provide expert technical support for potential targets both before and after the assessment.
• Complete communication and reporting activities including assessment kickoff meetings, daily statuses, and out-brief meetings.
• Perform annual, ongoing, and ad-hoc assessments that support the continuous monitoring strategy for all systems with an ATO.
• Collaborate with authorizing officials and/or system owners to plan penetration test assessments as needed.
• Conduct source code reviews for security vulnerabilities.
• Conduct security assessments on a wide variety of technologies and implementations.

Requirements

• BS/BA in Computer Science, Information Systems, Software Engineering, or a related analytical, scientific, or technical discipline.
• 4+ years of penetration testing experience.
• 3+ years of experience pentesting cloud FedRamp systems (Azure, AWS, GCP).
• Effective written and oral communication skills.
• Previous Federal Government experience is a plus.
• Security Clearance Minimum Secret.

Nice-to-haves

• Experience with vulnerability assessment tools.
• Knowledge of security frameworks and compliance standards.

Benefits

• Remote work flexibility with occasional on-site visits.
• Competitive salary range of $92K - $116K.