Experienced Penetration Tester

B&M Cyber; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

B&M Cyber in Washington, DC is seeking an experienced Penetration Tester to support federal clients, planning and conducting hands-on testing across infrastructure, applications, cloud, and identity environments.

The role requires delivering actionable remediation recommendations, developing RoE and test plans, and communicating findings to technical and non-technical stakeholders. Candidates must be eligible for security clearance and willing to work onsite in DC or Northern Virginia.

Qualifications

• Experience independently planning, executing, documenting, and presenting complex penetration testing engagements.
• Ability to provide a past performance report or comparable documentation that demonstrates competency as a penetration tester.
• At least five (5) years of hands-on penetration testing experience across infrastructure, application, cloud, and identity environments.
• Current Offensive Security Certified Professional (OSCP or OSCP+) or GIAC Penetration Tester (GPEN) certification, or equivalent (GXPN, OSEP).
• Ability to read and use results of security testing tools, perform false-positive analysis and validation, and communicate results and remediation actions to technical and non-technical audiences.
• Strong knowledge of network, application, cloud, and identity security and standard penetration testing tools.
• Strong analytical, problem-solving, written and verbal communication, technical writing, and documentation skills.

Responsibilities

• Identify and document vulnerabilities, misconfigurations, and compliance issues through thorough examination of external and internal infrastructure, systems, and security controls.
• Develop and execute Rules of Engagement (RoE), test plans, and SOPs aligned with client requirements and testing boundaries.
• Plan, scope, conduct, and document penetration testing across internal and external networks, web applications, APIs, databases, cloud services, Active Directory, and other identity technologies.
• Perform the full testing lifecycle, from non-intrusive scanning to exploitation and post-exploitation activities within the RoE.
• Analyze findings, identify attack paths, assess impact, and recommend practical remediation.
• Prepare accurate, technical reports describing findings and remediation, and present results to developers, admins, project managers, and senior Government stakeholders.
• Safeguard sensitive information encountered during testing in accordance with client security policies.
• Manage assignments, changing priorities, deadlines, and coordinate with stakeholders to resolve risks and issues.
• Contribute to continuous improvement of testing methodologies, tools, and frameworks, and mentor others.

Skills

Penetration testing

OSCP/GPEN

Burp Suite

Nessus

Metasploit

Nmap

PowerShell

Python

Technical writing

Communication

Team collaboration

Education

Bachelor's degree in Cybersecurity or related field

Tools

Burp Suite

Metasploit

Nessus

Nmap

BloodHound

Impacket

Job description

B&M Cyber is seeking an experienced Penetration Tester to support cybersecurity testing activities for our Federal clients. The successful candidate will plan and conduct hands‑on penetration testing across infrastructure, application, cloud, and identity environments and provide actionable recommendations to improve our clients’ security posture.

Candidates must be able to obtain a security clearanceand be willing to work onsite at Federal client locations in Washington, D.C. or Northern Virginia five (5) days per week.This position is contingent upon satisfaction of all applicable security requirements.

Responsibilities

• Identify and document vulnerabilities, misconfigurations, and compliance issues through thorough examination of external and internal infrastructure, systems, and security controls.
• Develop and execute approved Rules of Engagement (RoE), test plans, and standard operating procedures (SOPs) aligned with client requirements, penetration testing best practices, and approved testing boundaries.
• Plan, scope, conduct, and document penetration testing across internal and external networks, web applications, APIs, databases, cloud services, Active Directory, and other identity technologies.
• Perform the full testing lifecycle, from non-intrusive scanning and vulnerability discovery through exploitation, privilege escalation, lateral movement, and other post‑exploitation activities, within the approved RoE.
• Analyze findings, identify attack paths, assess technical and mission impact, and recommend practical corrective actions.
• Promptly escape critical and high‑risk findings to client leadership in accordance with the approved RoE.
• Prepare accurate, well‑written technical reports that describe findings, exploitation procedures, risks, and actionable remediation recommendations, and present results to developers, system administrators, project managers, and senior Government stakeholders.
• Safeguard sensitive information encountered during testing (e.g., credentials, personally identifiable information, and controlled unclassified information) in accordance with client security policies.
• Manage assignments and changing priorities, meet deadlines, coordinate with stakeholders, and proactively identify, communicate, and help resolve risks and issues.
• Contribute to the continuous improvement of penetration testing methodologies, tools, and frameworks, and participate in technical reviews, knowledge sharing, and mentoring.

Qualifications

• Experience independently planning, executing, documenting, and presenting complex penetration testing engagements.
• Ability to provide a past performance report or comparable documentation (e.g., a sanitized penetration test report you authored or detailed project examples) that demonstrates your competency level as a penetration tester. Do not submit client‑identifying, classified, or controlled information.
• At least five (5) years of hands‑on penetration testing experience across infrastructure (internal and external networks), application (web applications and APIs), cloud, and identity‑centric (e.g., Active Directory, Entra ID, and federation/SSO) environments.
• Current Offensive Security Certified Professional (OSCP or OSCP+) or GIAC Penetration Tester (GPEN) certification, or an equivalent hands‑on offensive security certification (e.g., GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) or OffSec Experienced Penetration Tester (OSEP)).
• Ability to read and use results of various security testing tools, perform false‑positive analysis and validation, and communicate results and recommended remediation actions to technical and non‑technical audiences.
• Strong knowledge of network, application, cloud, and identity security and industry‑standard penetration testing tools (e.g., Burp Suite, Metasploit, Nmap, Nessus, BloodHound, Impacket, and command‑and‑control frameworks).
• Strong analytical, problem‑solving, written and verbal communication, technical writing, and documentation skills, with attention to accuracy and completeness.
• Ability to work independently and collaboratively while managing multiple priorities.

Preferred Qualifications

• Active Secret or Top Secret clearance.
• Bachelor’s degree or higher in Cybersecurity or a related field.
• Experience supporting Federal, law enforcement, defense, intelligence community, or similarly sensitive environments.
• Working knowledge of relevant Federal cybersecurity requirements, NIST security testing guidance (e.g., NIST SP 800-115), OWASP security testing practices, and the MITRE ATT&CK framework.
• Experience serving as a senior technical specialist, technical lead, or subject matter expert, including reviewing technical work products and mentoring less experienced staff.
• Ability to automate testing, analysis, or reporting using Python, PowerShell, Bash, or similar languages.
• Experience briefing senior leadership and translating technical findings into recommendations tied to operational or mission impact.
• Additional relevant certifications such as GIAC Web Application Penetration Tester (GWAPT), GIAC Cloud Penetration Tester (GCPN), OffSec Web Expert (OSWE), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or similar.

Security and Clearance Requirements

Applicants selected will be subject to a security investigation. Final placement is contingent upon obtaining and maintaining the required eligibility and receiving Government approval. U.S. citizenship is required for this position in accordance with Federal requirements.

Equal Opportunity Employer

B&M Cyber is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other legally protected basis, in accordance with applicable law.

About Us

B&M Cyber (B&M Consulting Group, Inc.) is a woman‑owned small business (WOSB) with significant expertise and experience providing cybersecurity services to clients throughout the Federal government. We value collaboration, innovation, and continuous growth. Our employees work closely across corporate and client teams in a consulting environment to solve challenges and provide exceptional service. We foster a supportive environment where team members can share ideas, build new skills, and pursue the areas they are passionate about.