Cloud Pentester

KBR, Inc; Chantilly (VA); On-site; USD 191,000 - 233,000; Full time

Benefits offered by this job

401K with company match

Medical insurance

Dental insurance

Vision insurance

Life insurance

AD&D

Flexible spending account

Disability insurance

Paid time off

Flexible work schedule

Job summary

KBR, Inc. is seeking a Cloud Pentester to conduct penetration testing and adversarial emulation across enterprise networks, cloud environments, and systems. The role supports the National Security Solutions team and requires active TS/SCI with a polygraph.

The candidate will apply offensive techniques, analyze risk, and recommend security improvements, working on challenging national security projects in a rigorous environment.

Qualifications

• Requires active TS/SCI with a Polygraph.
• Bachelor's degree in Cybersecurity, CS, IT, Engineering, or related discipline; equivalent experience may be considered.
• Demonstrated experience conducting penetration testing or offensive cyber operations.
• Experience leveraging adversarial tactics, techniques, and procedures (TTPs) to evaluate security.
• Experience applying cyber attack methodologies and security testing frameworks.
• Knowledge of Windows, Linux, and virtualized platform security; network security analysis.
• Experience with architecture reviews and security control assessments.

Responsibilities

• Conduct penetration testing, vulnerability assessments, and adversarial emulation against networks, OS, apps, virtualized and cloud systems.
• Apply offensive cyber techniques and attack methodologies to identify security weaknesses.
• Analyze network architectures and security controls to evaluate risk and identify attack paths.
• Test Windows, Linux, virtualized and enterprise computing environments, including hypervisors.
• Assess IT security architectures and system implementations for best practices compliance.
• Analyze results, develop risk mitigation strategies, and provide actionable recommendations.
• Utilize security tools to support testing, reporting, and threat analysis.

Skills

Penetration testing

Vulnerability assessment

Adversarial emulation

Offensive cyber

Cyber attack methodologies

Security testing frameworks

Network security analysis

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related discipline

Tools

Penetration testing tools

Vulnerability scanners

Network analysis tools

Job description

Title: Cloud Pentester Belong. Connect. Grow. with KBR! KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.

Why Join Us?

Innovative Projects: KBR’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions. Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace. Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.

Key Responsibilities

• Conduct penetration testing, vulnerability assessments, and adversarial emulation activities against enterprise networks, operating systems, applications, virtualized environments, and cloud-based systems.
• Apply offensive cyber techniques, attack methodologies, and system exploitation approaches to identify and validate security weaknesses.
• Analyze network architectures, security controls, and system configurations to evaluate risk and identify potential attack paths.
• Perform security testing of Windows, Linux, virtualized, and enterprise computing environments, including hypervisors and supporting infrastructure.
• Assess and validate IT security architectures, technical designs, and system implementations to ensure compliance with cybersecurity best practices.
• Analyze assessment and testing results, develop risk mitigation strategies, and provide recommendations to improve overall security posture.
• Utilize network management, monitoring, and security assessment tools to support testing activities, reporting, and threat analysis.

Work Environment

Location: On-site

Travel Requirements: Minimal

Working Hours: Standard

Standard Qualifications

Required:

• Active TS/SCI with a Polygraph
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline. Additional relevant experience may be considered in lieu of a degree.
• Demonstrated experience conducting penetration testing, vulnerability assessments, or offensive cyber operations.
• Experience leveraging adversarial tactics, techniques, and procedures (TTPs) to evaluate system and network security.
• Experience applying cyber attack methodologies, exploitation techniques, and security testing frameworks.
• Working knowledge of cybersecurity principles, security controls, and operating system security for Windows, Linux, and virtualized platforms.
• Experience performing network security analysis, architecture reviews, and security control assessments.

Desired:

• Experience designing, implementing, or assessing enterprise security architectures.
• Experience evaluating complex Windows-based infrastructures, enterprise services, and system configurations.
• Experience testing or reviewing hypervisors, virtual environments, and enterprise computing platforms.
• Familiarity with major cloud service providers, cloud-native security concepts, and cloud architecture design.
• Experience developing risk management methodologies and translating technical findings into actionable mitigation plans.
• Hands‑on experience with commercial and open‑source penetration testing, vulnerability scanning, and network analysis tools.
• Relevant industry certifications such as OSCP, GPEN, CEH, CISSP, GCIH, or comparable cybersecurity certifications.

Basic Compensation

$190,500 to $232,800 annual salary. This range is for the Virginia area only. The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.

Additional Compensation

KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance.

KBR Benefits

KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together. KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

KBR — Delivering Solutions, Changing the World.

KBR brings together the best and brightest to deliver science, technology and engineering solutions that help governments and associations around the world accomplish their most critical missions and objectives. In everything we do, we are guided by our ONE KBR Values: We Value Our People – We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential. We Deliver – We are uncompromising in our commitment to deliver innovative, high-quality, technology‑led solutions for our customers and exceptional, sustainable value for all our stakeholders. We Are People of Integrity – We value honesty, trust, courage, fairness, prudence and tenacity. We believe doing what’s right for the planet, the communities where we work, and our people is good for business. We Empower – We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision‑makers, to be adaptive to change, and to succeed. We Are a Team of Teams – We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments. Our collective focus makes us a better, stronger, more effective company. We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals. Worldwide, KBR employs a diverse workforce approximately 29,000 people strong, with customers in more than 80 countries and operations in 40 countries. At KBR, We Deliver.