Hybrid Penetration Tester — Offensive Security Pro

Koniag Government Services; Washington (District of Columbia); Hybrid; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan

Paid time off

Paid parental leave

Life and disability insurance

Flexible spending accounts

Commuter benefits

Tuition reimbursement

Job summary

Koniag Operations Services, a Koniag Government Services company, seeks a skilled Penetration Tester to support cybersecurity initiatives for government customers in Washington, DC. The role requires ability to obtain a Public Trust and is Hybrid.

Responsibilities include conducting authorized testing on networks, applications, and infrastructure; writing reports with risk ratings and remediation recommendations; and collaborating with admins, developers, and security teams to validate and

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 3–5 years of penetration testing or offensive security experience.
• Experience with network, web app, and wireless pentests.

Responsibilities

• Perform penetration testing on networks, web apps, mobile apps, and infrastructure to identify weaknesses.
• Conduct vulnerability assessments and exploit identified weaknesses in a controlled, authorized manner.
• Develop and execute test plans including recon, scanning, exploitation, and post-exploitation.

Skills

Communication skills

Networking knowledge

Penetration testing

Scripting (Python, Bash, PowerShell)

Offensive security mindset

Education

Bachelor's degree in Computer Science / Cybersecurity / IT

Tools

Metasploit

Burp Suite

Nmap

Wireshark

Kali Linux

Job description

Koniag Operations Services, a Koniag Government Services company, seeks a skilled Penetration Tester to support cybersecurity initiatives for government customers in Washington, DC. The role requires ability to obtain a Public Trust and is Hybrid.

Responsibilities include conducting authorized testing on networks, applications, and infrastructure; writing reports with risk ratings and remediation recommendations; and collaborating with admins, developers, and security teams to validate and