Penetration Tester

VTG Defense; Aurora (CO); On-site; USD 150,000 - 195,000; Full time

Job summary

VTG Defense is seeking Penetration Testers at Levels 2–4 for positions in Chantilly, VA and Aurora, CO. This role requires TS/SCI with Poly and a minimum Security+ certification, with travel around 25% (OCONUS).

You will perform reconnaissance, vulnerability scanning, and lead complex tests while mentoring junior staff. Levels differ in responsibility and tool development; Level 4 SME duties include developing customized methodologies and guiding remediation efforts across teams.

Qualifications

• TS/SCI with Poly is required.
• Minimum Security+ certification required.
• Multiple levels with DoD cybersecurity experience preferred.

Responsibilities

• Perform basic reconnaissance and vulnerability scanning per testing methodologies.
• Lead penetration tests and mentor junior testers; develop targeted exploits.
• Design and implement complex tests; advise on security best practices.

Skills

Reconnaissance

Vulnerability scanning

Scripting basics

Network fundamentals

Penetration testing

Mentoring juniors

Education

Bachelor's Degree or Higher

High School GED

Associates Degree

Masters or Higher

Tools

Vulnerability scanning tools

Exploitation tools

Job description

Overview

VTG is looking for multiple levels (Level 2, 3 & 4) of a Penetration Tester in Chantilly VA and Aurora CO. (Note: position is contingent upon program award and the postions are located in Chantilly VA & Auroro CO)

A Penetration Tester (Pen Tester) is a security professional who reviews and evaluates NRO ISs and recommends changes to the Government that can improve information confidentiality, integrity, and availability. Pen Testers are also responsible for performing security focused services to improve the security posture of NRO ISs.

Travel: 25% estimate for pen testers (OCONUS travel 2x per year).

What will you do?

Pen Tester, Level 2 (Intermediate)
In addition to being responsible for performing basic reconnaissance and vulnerability scanning in accordance with established testing methodologies; identifies common vulnerabilities that can be potentially exploited, documents and reports findings. Possess basic scripting abilities and an understanding of network fundamentals and vulnerability scanning tools. The Level 2 Pen Tester is responsible for conducting more complex penetration tests, exploring more complex vulnerability analysis including misconfigurations and zero-day exploits, and developing more sophisticated exploitation techniques. Leads penetration tests, mentoring junior testers, and providing technical guidance to stakeholders. Possess expertise in network protocols, application security, social engineering, and advanced scripting.

Pen Tester, Level 3 (Senior)
In addition to achieved duties described in Level 2, the Pen Tester is responsible for designing and leading complex penetration tests, develops customized tools and methodologies; providing expert guidance on security best practices; identifying complex vulnerabilities, providing strategic security advice, and leading remediation efforts; collaborating with management to develop security policies, training other cybersecurity professionals, and staying abreast of emerging threats. Possess extensive knowledge of cybersecurity frameworks, industry standards, and advanced security tools.

Pen Tester, Level 4 (Subject Matter Expert)
In addition to achieved duties described in Level 3, the Pen Tester will possess additional years of experience as described in Table A.5.5.1.

Do you have what it takes?

All positions require: TS/SCI with Poly

• Level 2 Penetration Tester:
  • Education: Bachelor's Degree or Higher, AND Pen Tester Experience: 3 years
  • OR High School GED + 5 Years Relevant Experience
  • OR Associates Degree + 4 Years Relevant Experience
  • OR Masters or Higher + 2 Years Relevant Experience
• Level 3 Penetration Tester:
  • Education: Bachelor's Degree or Higher, AND Pen Tester Experience: 4 years
  • OR High School GED + 9 Years Relevant Experience
  • OR Associates Degree + 7 Years Relevant Experience
  • OR Masters or Higher + 5 Years Relevant Experience
• Level 4 Penetration Tester:
  • Education: Bachelor's Degree or Higher, AND Pen Tester Experience: 7 years
  • OR Masters or Higher + 6 Years Relevant Experience

All Level Certifification Requirement: Minimum Security+
Desired:

• DoD 8140 - CSSP Incident Responder certification
• CyberSec First Responder (CFR)
• Cisco Cert. Network Assoc. CyberOps (CCNA CyberOps)
• CompTIA Pen Test+
• CompTIA Cybersecurity Analyst (CySA+)
• Certified Hacking Forensic Investigator (CHFI)
• CCNA Security
• GIAC Forensic Analyst (GCFA)
• GIAC Certified Incident Handler (GCIH)
• SCYBER

Pay Range: VTG's estimated starting pay range is $150,000 - 195,000 annually, which is a general guideline for and depending on the geographic location. When extending an offer, VTG also considers work experience, education, skill level, market considerations and may possibly include contractual requirements which may cause an offer to fall outside of this range