Federal Penetration Testing Lead — Executive Security Assessments

Revolutional; Kansas City (MO); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental/vision insurance

STD/LTD/Life insurance

401(k) matching

Flexible schedules

Teleworking

Paid holidays

PTO

Job summary

Revolutional is seeking a Lead Penetration Tester to drive end-to-end security assessments for a portfolio of federal agencies. You will develop test plans, lead technical execution, produce reports and brief agency CIO/CISO audiences, serving as the senior technical authority on engagements.

This role requires active Secret clearance, FedRAMP testing experience, and a strong background in OWASP, NIST SP 800, and DISA STIG methodologies. Travel to agency sites will be required as needed.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
• 5+ years of hands-on penetration testing with federal environment leadership.
• CISA AES (Authorized External Security) certification required, or actively in process of obtaining
• FedRAMP penetration testing experience required.
• Active Secret clearance.
• Willingness to travel to agency sites.

Responsibilities

• Lead operational security assessments across federal agencies in accordance with the ISC Security Assessment Methodology and applicable rules of engagement; manage approximately 6–7 agency assessments per year
• Conduct web application security assessments using OWASP methodology; assess approximately 3–4 applications per year across a range of agency environments
• Develop comprehensive test plans for each engagement: scope definition, assessment objectives, methodology selection, rules of engagement, and timeline
• Build criticality matrices that prioritize findings by risk, asset value, and mission impact to support agency remediation planning
• Author detailed security assessment reports documenting findings, evidence, risk ratings, and actionable remediation guidance meeting federal evidentiary and reporting standards
• Develop and deliver out‑brief presentations to agency CIO, CISO, and senior leadership audiences; communicate complex technical findings with clarity and executive‑level credibility
• Conduct FedRAMP‑qualified penetration testing in support of cloud service authorization activities; apply FedRAMP pen testing requirements and documentation standards
• Apply NIST SP 800 series guidance and DISA STIG methodology throughout assessment planning, execution, and reporting
• Coordinate with agency stakeholders before, during, and after assessments to manage expectations, address questions, and ensure findings are understood and acted upon
• Stay current on vulnerability research, offensive techniques, and emerging attack surfaces relevant to federal civilian agency environments

Skills

Lead assessments

Security testing

OWASP

NIST SP 800

DISA STIG

FedRAMP

Executive communication

Tool proficiency

Education

Bachelor’s degree or equivalent experience

Tools

Penetration testing toolsets

Network testing tools

Web app testing tools

Job description

Revolutional is seeking a Lead Penetration Tester to drive end-to-end security assessments for a portfolio of federal agencies. You will develop test plans, lead technical execution, produce reports and brief agency CIO/CISO audiences, serving as the senior technical authority on engagements.

This role requires active Secret clearance, FedRAMP testing experience, and a strong background in OWASP, NIST SP 800, and DISA STIG methodologies. Travel to agency sites will be required as needed.