Lead Penetration Tester — TS/SCI Clearance

Navstar Inc; Annapolis (MD); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Health care premiums (employer paid)

Flexible Spending Accounts (FSA)

Generous PTO and federal holidays

Employer paid STD/LTD

Employer paid life insurance

401K plan and employer match

Referral programs

Professional development assistance

Job summary

Navstar Inc is seeking a Lead Penetration Tester to join a high-performing SAFe-aligned team on a large, complex program. You will perform internal/external pentests, web app testing, risk assessments, and incident response while ensuring security across LAN/WAN, servers, and endpoints.

Collaboration with engineers and program teams is essential for continuous modernization and secure architectures. The role requires a TS/SCI clearance with Polygraph, extensive pentesting experience, and

Qualifications

• Active TS/SCI clearance with Polygraph is required.
• Experience in penetration testing across internal and external systems.
• Background in web development languages (Java, XML, Perl, HTML) and scripting (Python, PowerShell, C, JavaScript).
• Significant work in IT security risk assessments and vulnerability remediation.
• Hands-on web app and physical pentesting experience with industry tools.
• Familiarity with Kali, Burp Suite, Web Inspect, AppDetective and related tooling.
• Strong knowledge of the Cyber Kill Chain and RMF processes.
• Ability to collaborate with development and customer teams to implement mitigations.

Responsibilities

• Perform internal and external pentests to identify vulnerabilities and craft mitigations.
• Conduct web app pentests and vulnerability risk assessments.
• Execute physical pentests and social engineering analyses as needed.
• Lead cyber incident response activities when required.
• Evaluate impact of new development on security posture of IT systems.
• Review and test critical software for security compliance.
• Define security requirements for new features and enforce policies.
• Identify and remediate security issues across the system.
• Audit configurations using standard security methodologies and tools.
• Collaborate with developers to broaden threat awareness and remediation strategies.
• Coordinate with System Eng., Test Eng., and Integration teams to meet security needs.

Skills

TS/SCI clearance with Polygraph

Penetration testing tools

Java/XML/Perl/HTML

Python/PowerShell/C/Javascript

IT security risk assessments

Web app pentests

Physical pentests

IPS/IDS familiarity

Cyber Kill Chain

Risk Management Framework (RMF)

Secure configurations of OS

Cross-functional collaboration

Multi-project management

Education

Bachelor's degree in a technical/information assurance field

Tools

Burp Suite

Web Inspect

AppDetective

Kali Linux

IPS/IDS tooling

Job description

Navstar Inc is seeking a Lead Penetration Tester to join a high-performing SAFe-aligned team on a large, complex program. You will perform internal/external pentests, web app testing, risk assessments, and incident response while ensuring security across LAN/WAN, servers, and endpoints.

Collaboration with engineers and program teams is essential for continuous modernization and secure architectures. The role requires a TS/SCI clearance with Polygraph, extensive pentesting experience, and