Penetration Tester

Leidos LLC; Alexandria (VA); Sur place; USD 108 000 - 195 000; Plein temps

Résumé du poste

Leidos is seeking experienced Penetration Testers to support the DMDC CyberPRIMES program in the Mark Center, Alexandria, VA. You will conduct government-directed penetration testing and threat-hunting across DHRA systems, networks, and applications, identifying exploitable weaknesses and providing actionable findings to reduce risk.

Join a team supporting the Defense Human Resources Activity with RMF boundaries, enterprise tooling, and cross‑disciplinary collaboration to improve cybersecurity

Qualifications

• Experience conducting penetration testing, vulnerability assessment, threat hunting, offensive security, or comparable cybersecurity assessment activities.
• Experience assessing enterprise networks, systems, applications, web applications, or code for exploitable cybersecurity weaknesses.
• Experience using commercial or open-source penetration-testing and offensive-security tools.
• Ability to communicate technical findings clearly to stakeholders.

Responsabilités

• Conduct Government-directed penetration-testing assessments and threat-hunting activities.
• Develop assessment plans, methodologies, test objectives, rules of engagement, and technical approaches.
• Execute authorized testing against networks, systems, applications, web apps, and code.
• Identify vulnerabilities, weaknesses, and exploitable configurations that could be used by adversaries.
• Document testing activities and provide remediation recommendations.

Connaissances

Penetration testing

Threat hunting

Offensive security

Vulnerability assessment

Technical communication

Test methodology

Formation

Bachelor's degree in a related technical field

Outils

Penetration-testing tools

Description du poste

Looking for an opportunity to make an impact? At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. We empower our teams, contribute to our communities, and operate sustainable. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business. If this sounds like a mission you want to be a part of, keep reading! Leidos is seeking experienced Penetration Testers to support the Defense Manpower Data Center (DMDC) CyberPRIMES program. Leidos is a major partner on the contract and will provide a substantial portion of the cybersecurity workforce supporting the Defense Human Resources Activity (DHRA) and DMDC. The Penetration Tester will conduct Government-directed penetration testing and threat-hunting assessments across DHRA systems, networks, applications, and supporting technologies. This position will identify exploitable weaknesses, validate the effectiveness of defensive cybersecurity capabilities, and provide actionable findings that help system owners and cybersecurity teams reduce risk.

Work Location: Mark Center, Alexandria, Virginia

Mission Environment DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)) and maintains the Department of Defense’s largest and most comprehensive central repository of personnel, manpower, casualty, pay, entitlement, personnel security, identity, readiness, training, and related data. The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS). The penetration-testing team conducts Government-selected assessments of DHRA programs and also performs ad hoc testing with cybersecurity-tool administrators and Security Operations Center personnel to determine whether defensive capabilities are detecting and alerting as intended. Testing may span enterprise networks, web applications, applications, code, and other mission systems.

Primary Responsibilities

• Conduct Government-selected penetration-testing assessments and threat-hunting activities in accordance with established DMDC procedures and the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-115.
• Develop assessment plans, methodologies, test objectives, rules of engagement, and technical approaches appropriate to the target environment.
• Execute authorized penetration-testing activities against networks, systems, applications, web applications, and code.
• Identify vulnerabilities, exploitable configurations, attack paths, and weaknesses that could be used by a malicious actor.
• Assess the practical exploitability and potential mission impact of identified security weaknesses.
• Research emerging and existing threats, attack techniques, vulnerabilities, and adversary behaviors that may affect DHRA systems.
• Develop testing methodologies designed to identify areas of risk likely to be targeted by an intruder.
• Conduct threat-hunting activities to identify suspicious or malicious activity that may not be detected through routine monitoring.
• Perform cooperative testing with cybersecurity-tool administrators, Security Operations Center (SOC) analysts, incident-response personnel, and Security Information and Event Management (SIEM) content developers.
• Validate whether enterprise cybersecurity tools properly detect, generate alerts for, and support analysis of authorized offensive activity.
• Identify detection or alerting gaps discovered during testing and provide technical findings to the appropriate cybersecurity teams.
• Support pre-audit penetration testing to identify exploitable weaknesses before formal assessments or reviews.
• Apply established penetration-testing methodologies and approved commercial or open-source offensive-security tools.
• Support Red Team and Blue Team activities designed to evaluate and improve enterprise cybersecurity defenses.
• Document testing activities, technical evidence, vulnerabilities, exploitation results, and risk findings.
• Develop post-assessment out-briefs and final assessment reports for Government stakeholders.
• Provide technically actionable remediation recommendations based on assessment findings.
• Coordinate findings with system owners, application teams, network engineers, cybersecurity personnel, SOC analysts, and incident responders.
• Maintain Government-Furnished Equipment and approved penetration-testing systems, laptops, software, and tools required to perform assessments.
• Protect assessment data, technical artifacts, credentials, exploit information, and other sensitive testing information in accordance with Government requirements.

Basic Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline and 8+ years of prior relevant experience.
• In lieu of degree, additional experience may be required.
• Experience conducting penetration testing, vulnerability assessment, threat hunting, offensive security, or comparable cybersecurity assessment activities.
• Experience assessing enterprise networks, systems, applications, web applications, or code for exploitable cybersecurity weaknesses.
• Experience using commercial or open-source penetration-testing and offensive-security tools.
• Understanding of common attack techniques, exploitation methods, network protocols, operating systems, and application-security concepts.
• Experience developing penetration-testing methodologies, test plans, or technical assessment procedures.
• Experience documenting vulnerabilities, technical evidence, exploitation results, and remediation recommendations.
• Ability to distinguish theoretical vulnerabilities from weaknesses that present practical exploitation or mission risk.
• Ability to communicate technical findings clearly to system owners, engineers, cybersecurity personnel, and Government stakeholders.
• Ability to conduct authorized offensive-security activities within defined rules of engagement and Government-approved procedures.
• U.S. Citizenship required.
• Active Secret security clearance required.

Preferred Qualifications

• Experience conducting penetration testing within Department of Defense or Federal environments.
• Experience applying National Institute of Standards and Technology Special Publication 800-115 testing methodologies.
• Experience conducting network, web-application, application, and source-code security assessments.
• Experience performing threat hunting or adversary-emulation activities.
• Experience supporting Red Team and Blue Team exercises.
• Experience working with Security Operations Center analysts and incident responders during cooperative testing.
• Experience validating SIEM detections, security alerts, or cybersecurity-tool effectiveness using controlled offensive activity.
• Experience conducting pre-audit or pre-authorization security assessments.
• Experience researching emerging vulnerabilities, attack techniques, and adversary tradecraft.
• Experience developing executive and technical penetration-testing out-briefs and assessment reports.
• Familiarity with Department of Defense Risk Management Framework processes.
• Familiarity with DHRA, DMDC, or comparable Department of Defense enterprise environments.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Pay and Benefits

Pay and Benefits Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers.

• Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement.

More details are available here.

Pay Range: Pay Range $107,900.00 - $195,050.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $17.2 billion for the fiscal year ended January 2, 2026. For more information, visit www.Leidos.com.

Securing Your Data

Securing Your Data Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [e-mail].

Commitment and Diversity

Commitment and Diversity All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.