Cyber Security Project Engineer

Fantom Corp; Herndon, Northern (VA, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Fantom Corp seeks an experienced Cybersecurity Penetration Tester to assess enterprise systems, networks, and virtualized environments. You will conduct hands-on adversarial testing, identify vulnerabilities, and develop mitigation recommendations to strengthen security.

The role emphasizes clear communication of risks to stakeholders and actionable security improvements. On-site work at client or internal facilities is required.

Qualifications

• Hands-on cyber penetration testing and adversarial security testing experience.
• Experience with computer attack methods, exploitation techniques, and vulnerability assessment.
• Strong knowledge of security principles for Linux, Windows, and virtual platforms.
• Experience designing, testing, or implementing IT security architectures.
• Ability to translate testing results into mitigation plans and risk methodologies.

Responsibilities

• Conduct penetration testing and adversarial security assessments of enterprise systems and networks.
• Apply computer attack methods and system exploitation techniques to identify vulnerabilities.
• Perform network security and architecture analysis.
• Assess security across Linux, Windows, and virtualized environments.
• Review system configurations, designs, enterprise platforms, and hypervisors for security weaknesses.
• Design, test, and evaluate IT security architectures.
• Analyze security test results and develop risk and threat mitigation recommendations.
• Develop and apply risk management methodologies.
• Utilize network management and security tools to identify and investigate vulnerabilities.
• Assess complex Windows installations and enterprise environments.
• Document findings and communicate technical risks and remediation recommendations to stakeholders.

Skills

Penetration testing

Adversarial security testing

Vulnerability assessment

Linux security

Windows security

Virtualization security

Risk management methodologies

Documentation of findings

Education

Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical discipline

CEH

OSCP

GPEN

Tools

GCP

OCI

Job description

Fantom Corporation is a mission-focused organization supporting critical programs across the defense and intelligence community. We partner with our customers to deliver high-impact technical solutions while fostering a culture built on trust, expertise, and long-term career growth.

We are seeking an experienced Cybersecurity Penetration Tester to assess the security of complex enterprise systems, networks, and virtualized environments. This role will conduct hands-on adversarial testing, identify vulnerabilities, analyze security risks, and develop mitigation recommendations to strengthen the overall security posture.

Responsibilities

• Conduct penetration testing and adversarial security assessments of enterprise systems and networks
• Apply computer attack methods and system exploitation techniques to identify vulnerabilities
• Perform network security and architecture analysis
• Assess security across Linux, Windows, and virtualized environments
• Review system configurations, designs, enterprise platforms, and hypervisors for security weaknesses
• Design, test, and evaluate IT security architectures
• Analyze security test results and develop risk and threat mitigation recommendations
• Develop and apply risk management methodologies
• Utilize network management and security tools to identify and investigate vulnerabilities
• Assess complex Windows installations and enterprise environments
• Document findings and communicate technical risks and remediation recommendations to stakeholders

Required Qualifications

• Professional experience in cybersecurity or a related IT field
• Hands-on cyber penetration testing and adversarial security testing experience
• Experience with computer attack methods, exploitation techniques, and vulnerability assessment
• Strong knowledge of security principles for Linux, Windows, and virtual platforms
• Experience with network security analysis and network architecture
• Experience designing, testing, or implementing IT security architectures
• Experience assessing enterprise systems, hypervisors, and complex Windows environments
• Experience developing risk methodologies and translating testing results into mitigation plans
• Ability to perform complex technical security assessments and clearly document findings

Desired Qualifications

• Experience communicating vulnerabilities and organizational risk posture to senior executives
• Experience participating in public or private information security organizations
• Ability to perform complex technical tasks with minimal direction
• Experience with Google Cloud Platform (GCP)
• Experience with Oracle Cloud Infrastructure (OCI)
• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical discipline
• Relevant certifications such as CEH, OSCP, or GIAC Penetration Tester (GPEN)
• #CJ

Requirements

• Must be fully cleared with a recent polygraph
• Must be willing and able to work fully onsite at the location listed in this posting

Fantom Corp is a Software Development, Agile Cloud, Software Development, Cyber Security (Risk Management, Assessments & Authorization (A&A)), Data, AI Platform (Computer Vision Models), Podcasting Media Services, and IT Services provider. Established in 2015, Fantom Corp serves Federal customers with top-notch Cybersecurity Architects, Data Scientists/Analysts, Software Engineers/Developers, DevSecOps Engineers, Project Managers, Identity, Credential Access Management (ICAM) services , and Cloud-certified practitioners. We excel in delivering emerging technologies such as Artificial Intelligence (AI) and Machine Learning (ML) with a focus on identifying trends, object detection, and classification of structured and unstructured data. Fantom Corp possesses mastery in all aspects of digital audio production. We lead in the ideation and creation of efforts for clients who want to harness the power of podcasting. We guide them in selecting the right show format for their needs and goals. As a Small Business, we possess the innovation, speed and flexibility to meet your requirements.