DoD Red Team Penetration Tester | TS Clearance

Booz Allen Hamilton; Virginia; On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a seasoned penetration tester to safeguard critical digital environments for DoD-related systems in the United States. You will design and execute detailed test plans for onsite and remote security assessments, and simulate attack stages such as footprinting, scanning, enumeration, and privilege escalation to evaluate defenses.

The role involves using RMF artifacts, GPOs, and WSUS, plus performing packet-level analysis with Wireshark/tcpdump to identify malicious

Qualifications

• 5+ years of experience in software engineering applied to DoD or Information Technology systems.
• Experience with Penetration Testing (PENTEST), Red Team Operations, Tool or Software Development, such as exploits and malware, C2, reverse engineering, and bug bounties, PHP, ASP, SQL db's, Java, HTML, or No SQL
• Knowledge of Linux and Windows based systems
• Knowledge of common Penetration Testing (PENTEST) tools such as Kali, Metasploit, NMAP, and Cobalt Strike
• Ability to debug and reverse engineer software
• HS diploma or GED
• IAT Level II per DoD 8570.01 or successor Certification
• Ability to obtain OSCP, OSCE, OSEE, OSWP, SANS, SEC560 - Network Penetration testing and Ethical Hacking, SEC542 - Web App Penetration Testing and Ethical Hacking, SEC660 - Advance Penetration Testing, Exploit Writing, and Ethical Hacking, SEC642 -Advanced Web App Penetration Testing and Ethical Hacking, or SEC564 - Red Team Operations and Threat Emulation Certification within 3 months of hire date

Responsibilities

• Develop detailed test and assessment plans to be used during onsite and remote security assessments.
• Understand and carry-out attack stages such as footprinting, scanning, enumeration, gaining access, escalation of privileges, maintaining access, and network exploitation.
• Cover tracks using TTPs to simulate adversaries and evaluate defenses.
• Provide customer support by performing vulnerability scans, RMF artifacts, and configuration data reviews.
• Conduct packet-level analysis using Wireshark and tcpdump to identify anomalous traffic.

Skills

Penetration testing

Red Team

Exploit writing

Reverse engineering

Malware analysis

Linux & Windows

Education

HS diploma or GED

IAT Level II

Tools

Kali Linux

Metasploit

NMAP

Cobalt Strike

Job description

Booz Allen Hamilton is seeking a seasoned penetration tester to safeguard critical digital environments for DoD-related systems in the United States. You will design and execute detailed test plans for onsite and remote security assessments, and simulate attack stages such as footprinting, scanning, enumeration, and privilege escalation to evaluate defenses.

The role involves using RMF artifacts, GPOs, and WSUS, plus performing packet-level analysis with Wireshark/tcpdump to identify malicious