Cyber Penetration Tester – Mid-Level

General Dynamics Information Technology (GDIT); Ashburn (VA); On-site; USD 108,000 - 129,000; Full time

Benefits offered by this job

401(k) plan

Health benefits

Paid time off

Job summary

General Dynamics Information Technology (GDIT) is seeking a Penetration Tester for CBP to lead hands-on security assessments across networks, applications, and cloud workloads. You will emulate real-world threats, document vulnerabilities, and guide remediation within a high-stakes federal cybersecurity program.

The role emphasizes cross-functional collaboration, detailed reporting, and ongoing validation of security controls in a dynamic mission environment.

Qualifications

• 3+ years of penetration testing or offensive security experience.
• Strong understanding of exploit development concepts and offensive tooling.
• Experience with network, application, and wireless assessments using modern red-team methodologies.
• Ability to develop structured documentation and communicate to technical and non-technical audiences.

Responsibilities

• Conduct hands-on penetration testing of networks, applications, endpoints, cloud workloads, and mission systems.
• Identify misconfigurations, privilege escalation paths, insecure protocols, and exploitable flaws with standard tools.
• Perform credentialed and non-credentialed testing, including reconnaissance and exploitation.
• Evaluate vulnerabilities for exploitability, impact, and risk.
• Analyze complex environments to identify cross-domain security issues.
• Produce detailed assessment reports with remediation recommendations and retesting plans.

Skills

Cyber Operations

Cybersecurity Strategies

Cyber Threat Intelligence

Security Operations

Education

Bachelor’s degree in information technology, computer science, cybersecurity or related field

Tools

Nmap

NESSUS

Metasploit

Burp Suite

CANVAS

Kismet

Job description

General Dynamics Information Technology (GDIT) is seeking a Penetration Tester for CBP to lead hands-on security assessments across networks, applications, and cloud workloads. You will emulate real-world threats, document vulnerabilities, and guide remediation within a high-stakes federal cybersecurity program.

The role emphasizes cross-functional collaboration, detailed reporting, and ongoing validation of security controls in a dynamic mission environment.