Junior Penetration Tester

Rootedsec; Arlington (VA); On-site; USD 85,000 - 110,000; Full time

Job summary

Peraton in Arlington, VA is seeking a Junior Penetration Tester to join a small assessment team performing network, host, and internal web app testing on fixed engagements. Onsite work is expected; clearance sponsorship is available for the right candidate.

Most work is hands-on testing, with a substantial portion dedicated to writing findings that are reproducible and actionable. US persons eligible for a security clearance apply.

Qualifications

• 1–2 years of hands-on testing in labs or CTFs.
• Proficiency with Burp Suite and Nmap.
• Scripting language proficiency.
• Ability to explain attack paths to non-hackers.
• US person eligible for security clearance.

Responsibilities

• Execute network and application assessments under an agreed scope.
• Reproduce and document every finding with clear steps and evidence.
• Retest fixes and confirm the issue is actually closed.

Skills

Hands-on testing

Scripting language

Explain attack paths

Tools

Burp Suite

Nmap

Job description

# Junior Penetration TesterArlington, Virginia· ONSITEOperator+ signal## PeratonRun assessments against federal networks and write the findings up so they can be fixed.Type: FULLTIMERange: USD 85.000 – 110.000 per yearMode: ONSITEMinimum rank: Operator## About the roleYou join a small assessment team testing networks, hosts and internal web applications on a fixed engagement calendar. Most of the work is hands-on testing; a real share of it is writing, because a finding that nobody can reproduce does not get fixed. Clearance sponsorship is available for the right candidate.### What you will do* Execute network and application assessments under an agreed scope* Reproduce and document every finding with clear steps and evidence* Retest fixes and confirm the issue is actually closed### What they ask for* One to two years of hands-on testing, labs and CTFs count* Comfortable with Burp Suite, nmap and a scripting language* Able to explain an attack path to someone who is not a hacker* US person, eligible for a security clearance### Nice to have* OSCP or equivalent* Active Directory attack experience## What applying with Rooted meansThis role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.You can read this role without an account. To apply you need a Rooted credential.Create Professional profileSee every open security roleThis role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is Peraton. Confirm the final details with the original source or during the application process.Posted 2026-08-12