Lead Penetration Tester: Purple Team & Automation (Hybrid)

Cybersecurity Jobs; Washington (District of Columbia); Hybrid; USD 155,000 - 264,000; Full time

Benefits offered by this job

Health care

Life insurance

401(k)

Education assistance

PTO

Job summary

ASRC Federal Technology Solutions in Washington, DC is seeking a Senior Penetration Tester to lead advanced security assessments, drive testing strategy, and mentor a small team. This hybrid role requires hands-on testing of systems and applications and the development of assessment plans aligned with NIST SP 800-53 and FedRAMP controls.

The role involves coordinating with stakeholders to remediate findings, supporting secure operations, and guiding security engineering efforts across the

Qualifications

• Bachelor’s degree in a related field.
• 8+ years of relevant cybersecurity and penetration testing experience.
• Active DOE Q-Clearance or Top Secret (TS) equivalent required.

Responsibilities

• Lead and perform advanced security assessments, including hands-on penetration testing of systems and applications.
• Identify vulnerabilities, evaluate risk, and provide remediation recommendations.
• Develop and maintain assessment plans aligned with NIST SP 800-53 and FedRAMP Cloud Security Controls.
• Execute security assessments according to defined plans and document findings.
• Design, develop, and maintain tools and scripts to automate testing activities.
• Mentor a small team of junior penetration testers with technical guidance.
• Lead a Purple Team to support red/blue team exercises with customers.

Skills

Penetration testing

Team leadership

Assessment planning

Purple Team facilitation

Remediation guidance

Education

Bachelor’s degree in related field

Tools

NIST SP 800-53

FedRAMP Cloud Security Controls

Linux

Tenable Nessus

Forescout

Carbon Black

Invicti

Scythe

Rubrik

Fidelis

Job description

ASRC Federal Technology Solutions in Washington, DC is seeking a Senior Penetration Tester to lead advanced security assessments, drive testing strategy, and mentor a small team. This hybrid role requires hands-on testing of systems and applications and the development of assessment plans aligned with NIST SP 800-53 and FedRAMP controls.

The role involves coordinating with stakeholders to remediate findings, supporting secure operations, and guiding security engineering efforts across the