Application Security-Penetration Tester

Boston Government Services, LLC (BGS); Knoxville (TN); Hybrid; USD 170,167 - 200,196; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life Insurance

Paid vacation

401K

Long-term disability

Short-term disability

Job summary

Boston Government Services, LLC (BGS) invites qualified candidates for an Application Security-Penetration Tester to support diverse government contracts across the United States. The role conducts application, network, and infrastructure security testing, develops ROE and test plans, and delivers actionable reports with risks and remediation steps.

Candidates should have pen-testing experience, knowledge of OWASP/NIST, and the ability to communicate findings to technical and non-technical

Qualifications

• Bachelor’s Degree or equivalent.
• Experience conducting penetration tests, vulnerability assessments, application security testing, or technical security assessments.
• Familiarity with ROE development, test planning, exploitability validation, vulnerability scanning, web application security, network testing, and report writing.
• Knowledge of OWASP, NIST, CVSS, secure configuration, and common attack techniques.
• Ability to communicate findings clearly to technical and non-technical stakeholders.
• Must be a U.S. citizen.
• Successful drug screening.
• Must be eligible to obtain and maintain a security or clearance badge.

Responsibilities

• Conduct application, network, and infrastructure security testing to identify vulnerabilities.
• Develop and maintain penetration testing ROE and test plans.
• Prepare penetration test reports with findings, evidence, risks, and recommendations.
• Coordinate kickoff meetings, approvals, debriefs, and reporting timelines.
• Identify systemic trends to improve security posture.

Skills

Penetration testing

Vulnerability assessment

Security testing

Communication

Clearance eligible

Education

Bachelor’s Degree

Tools

OWASP

NIST

CVSS

Job description

BOSTON GOVERNMENT SERVICES, LLC. (BGS) has created this Evergreen Talent Pool post for gathering qualified candidates for a position relating to Application Security-Penetration Tester to support our clients in various locations across the US.

BGS is an engineering, technology, and security firm helping to advance missions of national importance for government programs, national laboratories, national security facilities, nuclear operations, and complex projects. We support clients at every stage, from strategic planning and program management to the execution of engineering and technical activities. We work to attract and retain the best talent because the best talent delivers the best results for our clients. Our capabilities are based on our experience in complex, secure, and highly regulated environments. We leverage our experience and capabilities to provide mission-driven solutions tuned to our client's mission needs and strategic direction.

Work that Matters. People that Matter More. At BGS, we believe meaningful work starts with great people. We foster a culture built on respect, collaboration, and accountability - where employees are empowered to contribute ideas, grow professionally, and make an impact. We care about our employees' well-being through competitive benefits, clear expectations, and an environment that values both excellence and connection.

If you align with BGS' company values and culture, we would love for you to explore opportunities to join our growing team by checking out the job description below!

Responsibilities

The Application Security-Penetration Tester conducts application, infrastructure, and network security testing to identify exploitable vulnerabilities, validate security controls, support risk reduction, and provide actionable recommendations for client systems.

• Support development and maintenance of penetration testing rules of engagement, test plans, and testing documentation.
• Conduct application, network, infrastructure, vulnerability, lateral movement, and related security testing activities.
• Perform reconnaissance, enumeration, target assessment, vulnerability validation, exploitability analysis, and evidence collection.
• Use approved commercial and open-source tools to identify and validate vulnerabilities.
• Prepare draft and final penetration test reports with findings, evidence, access paths, risks, and recommendations.
• Coordinate kickoff meetings, stakeholder approvals, debriefs, validation testing, and reporting timelines.
• Identify systemic trends across findings and support security posture improvement recommendations.

Requirements

• Bachelor’s Degree or equivalent.
• Experience conducting penetration tests, vulnerability assessments, application security testing, or technical security assessments.
• Familiarity with ROE development, test planning, exploitability validation, vulnerability scanning, web application security, network testing, and report writing.
• Knowledge of OWASP, NIST, CVSS, secure configuration, and common attack techniques.
• Ability to communicate findings clearly to technical and non-technical stakeholders.
• Must be a U.S. citizen.
• Successful drug screening.
• Must be eligible to obtain and maintain a security or clearance badge.

Preferred Qualifications

• OSCP, GPEN, GWAPT, PenTest+, CEH, CISSP, or equivalent.

Location/Work Arrangement:

• Schedule is full-time, Monday - Friday 40-hour week, 4/10’s, or 9/80’s and may require on call or overnight shifts depending on contract needs.
• This position may be fully onsite or hybrid/remote depending on the needs of the specific contract.

Benefits

BGS offers a competitive total compensation package to eligible employees. Benefits include Health, Dental, Vision, Life Insurance, Paid Vacation, 401K, Long and Short-Term Disability.

Starting compensation for this role typical salary ranges between $170,167 - $200,196 annually is commensurate with experience relative to the position and may vary based on candidate geographical location.

Eeo

BGS is an Equal Opportunity/Affirmative Action employer. All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.

Exclusive Agreement Disclaimer

BGS has standing contracts with federal agencies throughout the United States. We require an affirmative exclusive agreement to represent all candidates to our clients. By submitting this application, you are consenting to allow BGS to represent you as a candidate for the role in which you are applying.

Schedule is full-time, Monday - Friday 40-hour week, 4/10’s, or 9/80’s and may require on call or overnight shifts depending on contract needs.