Expert Penetration Tester

Amatriot Group, LLC; United States; Hybrid; USD 200,000 - 215,000; Full time

Job summary

Amatriot Group, LLC is seeking an Expert Penetration Tester to lead advanced security assessments and drive penetration testing strategies. The role combines hands-on testing with leadership, mentoring a small team, and collaboration across cybersecurity disciplines.

Location is Hybrid in Washington, DC, requiring three days onsite and active DOE Q or TS eligibility, or the ability to obtain. Target salary range is $200,000–$215,000 depending on education, experience, and certifications.

Qualifications

• Education: Bachelor’s degree in a related field.
• Experience: 8+ years in cybersecurity and penetration testing or equivalent.
• Clearance: Active DOE Q or Top Secret TS equivalent or eligible to obtain.
• Certifications: OSCP OSCE CEH CISSP or equivalent preferred.

Responsibilities

• Lead and perform advanced security assessments including hands-on penetration testing of systems and applications.
• Design, develop, and maintain tools to automate penetration testing activities.
• Mentor a small team of junior testers and lead Purple Team exercises with customer sites.
• Ensure security operations, risk management, and regulatory compliance across the lifecycle.

Skills

Vulnerability analysis

Risk remediation

Reporting

Reproduce vulnerabilities

Linux

Nessus

Invicti

Fidelis

Executive communication

Education

Bachelor's degree in a related field

Tools

Tenable Nessus

Forescout

Carbon Black

Invicti

Scythe

Rubrik

Fidelis

Job description

Location Washington DC

Security Clearance Active DOE Q Clearance or Top Secret TS equivalent or eligible to obtain

Job Type Full Time

Target Salary Range 200000 215000

This represents the potential salary range for this position depending on education level years of experience andor certifications in addition to other position specific requirements which may impact salary

Position Overview

Amatriot is seeking an experienced Expert Penetration Tester to lead advanced security assessments and contribute to the development and execution of penetration testing strategies

This role combines hands on testing with leadership mentoring and collaboration across cybersecurity disciplines

Work Location

Hybrid DC 3 days per week onsite

Key Responsibilities

• Security Assessments and Penetration TestingLead and perform advanced security assessments including hands on penetration testing of systems and applications Identify vulnerabilities assess risks and deliver clear actionable remediation recommendations Develop and maintain assessment plans aligned with NIST SP 800 53 and FedRAMP Cloud Security Controls Execute security assessments according to defined plans and document findings accurately and promptly
• Tools and AutomationDesign develop and maintain tools and scripts to automate and enhance penetration testing activities
• Team Leadership and CollaborationManage and mentor a small team of junior penetration testers providing technical guidance and training Build and lead a Purple Team to perform joint redblue team exercises with customer sites Communicate technical findings effectively to technical teams and executive stakeholders
• Security Operations and Risk ManagementSupport secure systems operations and maintenance including security validation and accreditation activities Analyze and mitigate system security threats throughout the lifecycle including risk assessments and implementation of security engineering controls Ensure compliance with business continuity operations security insider threat detection physical security analysis and regulatory requirements

Qualifications

• EducationBachelors degree in a related field Required
• Experience8 years of relevant experience in cybersecurity and penetration testing or an equivalent combination of education and experience Required
• ClearanceActive DOE Q Clearance or Top Secret TS equivalent or eligible to obtain Required
• SkillsStrong proficiency in vulnerability analysis risk remediation and reporting Ability to clearly replicate vulnerabilities and provide actionable mitigation steps Familiarity with Linux Tenable Nessus Forescout Carbon Black Invicti Scythe Rubrik and Fidelis Excellent written and verbal communication skills with the ability to present technical findings to executive audiences
• Preferred QualificationsCertificationsOSCP Offensive Security Certified Professional OSCE Offensive Security Certified Expert CEH Certified Ethical Hacker CISSP Certified Information Systems Security Professional