Application Security-Penetration Tester

Boston Government Services, LLC; Oak Ridge (TN); On-site; USD 170,000 - 200,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

Life Insurance

Paid Vacation

401K

Long and Short-Term Disability

Job summary

Boston Government Services, LLC. (BGS) is seeking an Application Security-Penetration Tester in Oak Ridge, TN. The role involves conducting application, infrastructure, and network security testing to identify vulnerabilities, validate controls, and provide actionable recommendations.

Full-time, onsite or hybrid/remote depending on contract needs. Requirements include a Bachelor’s degree or equivalent, experience in penetration tests and security assessments, and the ability to communicate

Qualifications

• Bachelor’s Degree or equivalent.
• Experience conducting penetration tests, vulnerability assessments, application security testing, or technical security assessments.
• Familiarity with ROE development, test planning, exploitability validation, vulnerability scanning, web application security, network testing, and report writing.
• Knowledge of OWASP, NIST, CVSS, secure configuration, and common attack techniques.
• Ability to communicate findings clearly to technical and non-technical stakeholders.
• Must be a U.S. citizen.
• Must be eligible to obtain and maintain a security or clearance badge.

Responsibilities

• Conduct application, infrastructure, and network security testing to identify vulnerabilities and provide actionable recommendations.
• Support development of penetration testing rules of engagement, test plans, and testing documentation.
• Perform reconnaissance, enumeration, target assessment, vulnerability validation, and evidence collection.
• Use approved tools to identify and validate vulnerabilities.
• Prepare draft and final penetration test reports with findings and recommendations.
• Coordinate kickoff meetings, approvals, debriefs, validation testing, and timelines.
• Identify systemic trends and support security posture improvement recommendations.

Skills

Penetration testing

Vulnerability assessments

Application security testing

Technical security assessments

Report writing

Stakeholder communication

Education

Bachelor’s degree or equivalent

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Oak Ridge, TN, US

Salary Range: $170,167.00 To $200,196.00 Annually

Boston Government Services, LLC. (BGS) has created this Evergreen Talent Pool post for gathering qualified candidates for a position relating toApplication Security-Penetration Tester to support our clients in various locations across the US.

BGS is an engineering, technology, and security firm helping to advance missions of national importance for government programs, national laboratories, national security facilities, nuclear operations, and complex projects. We support clients at every stage, from strategic planning and program management to the execution of engineering and technical activities. We work to attract and retain the best talent because the best talent delivers the best results for our clients. Our capabilities are based on our experience in complex, secure, and highly regulated environments. We leverage our experience and capabilities to provide mission-driven solutions tuned to our client's mission needs and strategic direction.

Work that Matters. People that Matter More.

At BGS, we believe meaningful work starts with great people. We foster a culture built on respect, collaboration, and accountability—where employees are empowered to contribute ideas, grow professionally, and make an impact. We care about our employees’ well-being through competitive benefits, clear expectations, and an environment that values both excellence and connection.

If you align with BGS’ company values and culture, we would love for you to explore opportunities to join our growing team by checking out the job description below!

Responsibilities

The Application Security-Penetration Tester conducts application, infrastructure, and network security testing to identify exploitable vulnerabilities, validate security controls, support risk reduction, and provide actionable recommendations for client systems.

• Support development and maintenance of penetration testing rules of engagement, test plans, and testing documentation.
• Conduct application, network, infrastructure, vulnerability, lateral movement, and related security testing activities.
• Perform reconnaissance, enumeration, target assessment, vulnerability validation, exploitability analysis, and evidence collection.
• Use approved commercial and open-source tools to identify and validate vulnerabilities.
• Prepare draft and final penetration test reports with findings, evidence, access paths, risks, and recommendations.
• Coordinate kickoff meetings, stakeholder approvals, debriefs, validation testing, and reporting timelines.
• Identify systemic trends across findings and support security posture improvement recommendations.

Requirements

• Bachelor’s Degree or equivalent.
• Experience conducting penetration tests, vulnerability assessments, application security testing, or technical security assessments.
• Familiarity with ROE development, test planning, exploitability validation, vulnerability scanning, web application security, network testing, and report writing.
• Knowledge of OWASP, NIST, CVSS, secure configuration, and common attack techniques.
• Ability to communicate findings clearly to technical and non-technical stakeholders.
• Must be a U.S. citizen.
• Must be eligible to obtain and maintain a security or clearance badge.

Preferred Qualifications

• OSCP, GPEN, GWAPT, PenTest+, CEH, CISSP, or equivalent.

Location/Work Arrangement

• Schedule is full-time, Monday – Friday 40-hour week, 4/10’s, or 9/80’s and may require on call or overnight shifts depending on contract needs.
• This position may be fully onsite or hybrid/remote depending on the needs of the specific contract.

BGS offers a competitive total compensation package to eligible employees. Benefits include Health, Dental, Vision, Life Insurance, Paid Vacation, 401K, Long and Short-Term Disability.

Starting compensation for this role typical salary ranges between $170,167 – $200,196 annually is commensurate with experience relative to the position and may vary based on candidate geographical location.

EEO

BGS is an Equal Opportunity/Affirmative Action employer. All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.

Exclusive Agreement Disclaimer

BGS has standing contracts with federal agencies throughout the United States. We require an affirmative exclusive agreement to represent all candidates to our clients. By submitting this application, you are consenting to allow BGS to represent you as a candidate for the role in which you are applying.

Boston Government Services, LLC. (BGS) has created this Evergreen Talent Pool post for gathering qualified candidates for a position relating toApplication Security-Penetration Tester to support our clients in various locations across the US.

BGS is an engineering, technology, and security firm helping to advance missions of national importance for government programs, national laboratories, national security facilities, nuclear operations, and complex projects. We support clients at every stage, from strategic planning and program management to the execution of engineering and technical activities. We work to attract and retain the best talent because the best talent delivers the best results for our clients. Our capabilities are based on our experience in complex, secure, and highly regulated environments. We leverage our experience and capabilities to provide mission-driven solutions tuned to our client's mission needs and strategic direction.

Work that Matters. People that Matter More.

At BGS, we believe meaningful work starts with great people. We foster a culture built on respect, collaboration, and accountability—where employees are empowered to contribute ideas, grow professionally, and make an impact. We care about our employees’ well-being through competitive benefits, clear expectations, and an environment that values both excellence and connection.

If you align with BGS’ company values and culture, we would love for you to explore opportunities to join our growing team by checking out the job description below!

Responsibilities

The Application Security-Penetration Tester conducts application, infrastructure, and network security testing to identify exploitable vulnerabilities, validate security controls, support risk reduction, and provide actionable recommendations for client systems.

• Support development and maintenance of penetration testing rules of engagement, test plans, and testing documentation.
• Conduct application, network, infrastructure, vulnerability, lateral movement, and related security testing activities.
• Perform reconnaissance, enumeration, target assessment, vulnerability validation, exploitability analysis, and evidence collection.
• Use approved commercial and open-source tools to identify and validate vulnerabilities.
• Prepare draft and final penetration test reports with findings, evidence, access paths, risks, and recommendations.
• Coordinate kickoff meetings, stakeholder approvals, debriefs, validation testing, and reporting timelines.
• Identify systemic trends across findings and support security posture improvement recommendations.

Requirements

• Bachelor’s Degree or equivalent.
• Experience conducting penetration tests, vulnerability assessments, application security testing, or technical security assessments.
• Familiarity with ROE development, test planning, exploitability validation, vulnerability scanning, web application security, network testing, and report writing.
• Knowledge of OWASP, NIST, CVSS, secure configuration, and common attack techniques.
• Ability to communicate findings clearly to technical and non-technical stakeholders.
• Must be a U.S. citizen.
• Successful drug screening.
• Must be eligible to obtain and maintain a security or clearance badge.

Preferred Qualifications

• OSCP, GPEN, GWAPT, PenTest+, CEH, CISSP, or equivalent.

Location/Work Arrangement

• Schedule is full-time, Monday – Friday 40-hour week, 4/10’s, or 9/80’s and may require on call or overnight shifts depending on contract needs.
• This position may be fully onsite or hybrid/remote depending on the needs of the specific contract.

Benefits

BGS offers a competitive total compensation package to eligible employees. Benefits include Health, Dental, Vision, Life Insurance, Paid Vacation, 401K, Long and Short-Term Disability.

Starting compensation for this role typical salary ranges between $170,167 – $200,196 annually is commensurate with experience relative to the position and may vary based on candidate geographical location.

EEO

BGS is an Equal Opportunity/Affirmative Action employer. All qualified applicants are encouraged to apply and will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.

Exclusive Agreement Disclaimer

BGS has standing contracts with federal agencies throughout the United States. We require an affirmative exclusive agreement to represent all candidates to our clients. By submitting this application, you are consenting to allow BGS to represent you as a candidate for the role in which you are applying.

Schedule is full-time, Monday – Friday 40-hour week, 4/10’s, or 9/80’s and may require on call or overnight shifts depending on contract needs.