Cyber Security Engineer Penetration Tester Journeyman

OneZero Solutions; Alexandria (VA); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with company matching

Paid time off and holidays

Employee referral program

Educational assistance

Job summary

OneZero Solutions seeks a Journeyman Cyber Security Engineer - Penetration Tester to support the U.S. Coast Guard in Alexandria, VA. Hybrid work, Top Secret clearance required, and hands-on adversary emulation across networks, applications, and cloud infrastructure.

The role conducts red team operations, phishing assessments, and reports with actionable recommendations to improve defense postures for Coast Guard networks and exercises.

Qualifications

• Active TS clearance with SCI eligibility and ability to obtain/maintain.
• 2–3 years of hands-on cyber security, red team, and pen-testing experience.
• Proven phishing campaigns or social engineering experience.
• Strong scripting/coding in PowerShell, Python, C or C++.
• Experience with C2 frameworks and malware bypass concepts.

Responsibilities

• Lead adversary simulation activities, including access, movement, and data exfiltration.
• Conduct internal and external penetration tests and file reports with actionable findings.
• Operate and maintain C2 tooling and security tooling during engagements.
• Perform phishing assessments and evaluate security controls across networks.
• Prepare briefs and reports for DoD Cyber Protection Teams and Coast Guard stakeholders.

Skills

Top Secret clearance

Red team experience

Penetration testing

Phishing campaigns

Malware development familiarity

EDR/AV bypass strategies

PowerShell

C

C++

Python

C2 frameworks (Cobalt Strike, Sliver,,

Tools

Nmap

Burp Suite

Metasploit

BloodHound

Wireshark

Job description

OneZero Solutions seeks a Journeyman Cyber Security Engineer - Penetration Tester to support the U.S. Coast Guard in Alexandria, VA. Hybrid work, Top Secret clearance required, and hands-on adversary emulation across networks, applications, and cloud infrastructure.

The role conducts red team operations, phishing assessments, and reports with actionable recommendations to improve defense postures for Coast Guard networks and exercises.