Penetration Testing Lead

Excentium - Falls Church, VA

Full-time

Falls Church, VA

Specialty Trade Contractors

About the position

The Penetration Tester/Cyber Engineer serves as the technical lead and primary point of contact for all penetration testing activities under the contract. This role is responsible for ensuring that all penetration testing work meets contract requirements, adheres to applicable standards, and is completed according to the project plan and schedule. The position involves performing penetration tests to analyze and identify vulnerabilities in applications, systems, and networks, as well as providing recommendations for remediation to reduce risk exposure.

Responsibilities

• Serve as the technical lead and primary point of contact for all penetration testing activities.
• Ensure all penetration testing work meets contract requirements and applicable standards.
• Attend all Program Management Reviews and report on the status of penetration testing activities.
• Complete multiple penetration testing exercises successfully.
• Perform penetration testing to analyze the security posture and identify vulnerabilities.
• Act as an ethical attacker (red teamer) and defensive cybersecurity personnel (blue teamer).
• Develop and prepare penetration testing Rules of Engagement, test plans, and reports.
• Provide recommended remediation actions to lower overall risk exposure.
• Offer technical expertise on penetration testing tools and simulation environments.

Requirements

• Bachelor's Degree in Cyber Security, Computer Science, Information Technology, Engineering, Mathematics, or Physics.
• 6 years of experience related to the responsibilities outlined in the position description.
• Minimum of five years of penetration testing experience, with at least 2 years being recent (within the last 3 years).
• One or more of the following certifications are required: OSCP, OSCE, OSWP, OSWE, CEH, ECSA, LPT, GCIH, GPEN, GWAPT, GXPN, GAWN.
• For Blue Teaming: Two or more of the following certifications are required: CND, CNDA, GCIH, GCIA, GDAT, GDSA, GCED.