Lead Red Team Penetration Tester – Defense Cyber

SteelToad; Dahlgren (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Vision and dental insurance

Disability and life insurance

Health Savings Account

401(k) Savings Plan with match

11 paid holidays

120 accrued PTO hours per year

Professional Development Program

Salary determined by education and exp

Job summary

SteelToad is seeking a Vulnerability Assessment Analyst and Penetration Tester to deliver continuous cyber assessments, perform manual penetration testing, and develop tools to mitigate threats for DoD and regulated clients.

You will mentor engineers, automate tasks with scripting, and contribute to threat mitigation plans while upholding high security standards across systems and applications.

Qualifications

• DoD 8570.01-M Baseline Certification: CSSP Auditor.
• One of OSCP, OSCE, OSEE, or OSWP.

Responsibilities

• Perform manual application, service, and hardware penetration testing.
• Automate repetitive tasks with scripting languages.
• Mentor and lead engineers through complex penetration tests and assessments.
• Advance testing capabilities through automation and tooling.
• Create threat mitigation plans.

Skills

Metasploit

NMAP

Kali Linux

Cobalt Strike

Scripting languages (Python/C++)

Linux

Windows

macOS

Education

Bachelor’s degree in Cybersecurity, Cyber Operations, Cyber Engineering, Information Systems, Information Technology, Computer Engineering, Electrical Engineering, Electronics Engineering, Software Engineering, Computer Science, Mathematics with a concentration in Computer Science, or an equivalent discipline.

Tools

Metasploit

NMAP

Kali Linux

Cobalt Strike

Job description

SteelToad is seeking a Vulnerability Assessment Analyst and Penetration Tester to deliver continuous cyber assessments, perform manual penetration testing, and develop tools to mitigate threats for DoD and regulated clients.

You will mentor engineers, automate tasks with scripting, and contribute to threat mitigation plans while upholding high security standards across systems and applications.