Cyber Security Engineer Penetration Tester (Journeyman)

OneZero Solutions; Alexandria (VA); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with company matching

Paid time off and holidays

Employee referral program

Educational assistance

Job summary

OneZero Solutions seeks a Journeyman Cyber Security Engineer - Penetration Tester to support the U.S. Coast Guard in Alexandria, VA. Hybrid work, Top Secret clearance required, and hands-on adversary emulation across networks, applications, and cloud infrastructure.

The role conducts red team operations, phishing assessments, and reports with actionable recommendations to improve defense postures for Coast Guard networks and exercises.

Qualifications

• Active TS clearance with SCI eligibility and ability to obtain/maintain.
• 2–3 years of hands-on cyber security, red team, and pen-testing experience.
• Proven phishing campaigns or social engineering experience.
• Strong scripting/coding in PowerShell, Python, C or C++.
• Experience with C2 frameworks and malware bypass concepts.

Responsibilities

• Lead adversary simulation activities, including access, movement, and data exfiltration.
• Conduct internal and external penetration tests and file reports with actionable findings.
• Operate and maintain C2 tooling and security tooling during engagements.
• Perform phishing assessments and evaluate security controls across networks.
• Prepare briefs and reports for DoD Cyber Protection Teams and Coast Guard stakeholders.

Skills

Top Secret clearance

Red team experience

Penetration testing

Phishing campaigns

Malware development familiarity

EDR/AV bypass strategies

PowerShell

C

C++

Python

C2 frameworks (Cobalt Strike, Sliver,,

Tools

Nmap

Burp Suite

Metasploit

BloodHound

Wireshark

Job description

We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance.

Additional details are available on our website: https://www.onezerollc.com/careers/

Position Summary

OneZero Solutions is seeking a Journeyman-level Cyber Security Engineer - Penetration Tester to support the U.S. Coast Guard in Alexandria, VA. The selected candidate will assess the cyber security posture of Coast Guard operational networks through adversary emulation, conducting red team operations, penetration tests, and phishing assessments. This role also performs cyber threat emulation during scripted exercises to train DoD Cyber Protection Teams and delivers clear reports and briefs that turn technical findings into actionable recommendations.

Position Title: Cyber Security Engineer - Penetration Tester (Journeyman)

Location: Hybrid Alexandria, VA

Clearance: Top Secret

Adversary Simulation

• Deploy, configure, and operate Command and Control (C2) frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.
• Apply tactics, techniques, and procedures (TTPs) for initial access, lateral movement, privilege escalation, persistence, and data exfiltration.
• Leverage proprietary and open-source offensive security tool sets effectively to achieve engagement objectives.
• Execute phishing assessments.

Infrastructure

• Monitor, manage, and maintain cloud and on-premise infrastructure used during assessments.
• Use Git repositories to maintain operational tools and scripts.

Penetration Testing

• Conduct internal and external penetration testing.
• Perform network mapping and enumeration.
• Assess web and mobile applications.
• Perform database scans.
• Assess Active Directory attack paths using tools such as BloodHound.

Security Assessments

• Assess the cyber security posture of Coast Guard operational networks through adversary emulation.
• Develop reports and briefs detailing findings and recommendations for all completed assessments.
• Perform cyber threat emulation during scripted exercises to train DoD Cyber Protection Teams.

Required Qualifications

• 2 to 3 years of relevant experience.
• Active Top Secret security clearance with SCI eligibility.
• Hands-on experience with computers and network security.
• Experience conducting phishing campaigns or social engineering.
• Hands-on experience with red team tasks and penetration testing.
• Familiarity with malware development and EDR/AV bypass strategies.
• Experience with PowerShell, C, C++, or Python.
• Hands-on experience using C2 frameworks such as Cobalt Strike, Sliver, Havoc, or similar.

Preferred Qualifications

• Experience supporting Red Team or offensive cybersecurity operations.
• Experience with web application, network, wireless, cloud, or infrastructure penetration testing.
• Familiarity with tools such as Nmap, Burp Suite, Metasploit, BloodHound, Wireshark, or similar security testing tools.
• Knowledge of common attack frameworks and methodologies, including MITRE ATTandCK.
• Experience developing penetration testing reports and presenting technical findings.
• Active industry-recognized cybersecurity certifications such as OSCP, CEH, PenTest+, GPEN, or comparable certifications.