Penetration Tester

VT Group (VTG); Aurora (IL); On-site; USD 150,000 - 195,000; Full time

Job summary

VTG is recruiting Penetration Testers at Level 2, Level 3, and Level 4 for positions in Chantilly, VA and Aurora, CO. All roles require TS/SCI with Poly and involve travel about 25% with an estimated starting pay range of $150,000–$195,000 per year.

Level 2 requires education and experience as listed; Level 3/4 expand leadership, tool development, and strategic security responsibilities. Certifications in DoD 8140 CSSP Incident Responder are preferred.

Qualifications

• TS/SCI with Poly clearance required.
• Level 2/3/4 Pen Tester education and experience requirements listed in the sections above.
• DoD 8140 - CSSP Incident Responder certifications are desirable (e.g., CFR, CCNA CyberOps, Pen Test+, CySA+, CHFI, GCFA, GCIH).
• Travel: 25% OCOnus travel for pen testers.

Responsibilities

• Perform basic reconnaissance and vulnerability scanning per established testing methodologies.
• Lead penetration tests, mentor junior testers, and provide technical guidance to stakeholders.
• Design and lead complex penetration tests, develop customized tools and methodologies, and advise on security best practices.
• Stay abreast of emerging threats and collaborate to improve policy and remediation efforts.

Skills

Pen Tester Experience

Scripting

Network Fundamentals

Vulnerability Scanning Tools

Mentoring

Network Protocols

Application Security

Social Engineering

Advanced Exploitation Techniques

Education

Bachelor's Degree or Higher

High School GED

Associates Degree

Masters or Higher

Job description

All positions require: TS/SCI with Poly

Overview

VTG is looking for multiple levels (Level 2, 3 & 4) of a Penetration Tester in Chantilly VA and Aurora CO. (Note: position is contingent upon program award and the postions are located in Chantilly VA & Auroro CO)

A Penetration Tester (Pen Tester) is a security professional who reviews and evaluates NRO ISs and recommends changes to the Government that can improve information confidentiality, integrity, and availability. Pen Testers are also responsible for performing security focused services to improve the security posture of NRO ISs.

Travel: 25% estimate for pen testers (OCONUS travel 2x per year).

What will you do?

Pen Tester, Level 2 (Intermediate) Functional Description: In addition to being responsible for performing basic reconnaissance and vulnerability scanning in accordance with established testing methodologies; identifies common vulnerabilities that can be potentially exploited, documents and reports findings. Possess basic scripting abilities and an understanding of network fundamentals and vulnerability scanning tools. the Level 2 Pen Tester is responsible for conducting more complex penetration tests, exploring more complex vulnerability analysis including misconfigurations and zero-day exploits, and developing more sophisticated exploitation techniques. Leads penetration tests, mentoring junior testers, and providing technical guidance to stakeholders. Possess expertise in network protocols, application security, social engineering, and advanced scripting.

Pen Tester, Level 3 (Senior) Functional Description: In addition to achieved duties described in Level 2, the Pen Tester is responsible for designing and leading complex penetration tests, develops customized tools and methodologies; providing expert guidance on security best practices; identifying complex vulnerabilities, providing strategic security advice, and leading remediation efforts; collaborating with management to develop security policies, training other cybersecurity professionals, and staying abreast of emerging threats. Possess extensive knowledge of cybersecurity frameworks, industry standards, and advanced security tools.

Pen Tester, Level 4 (Subject Matter Expert) Functional Description: In addition to achieved duties described in Level 3, the Pen Tester will possess additional years of experience as described in Table A.5.5.1.

Do you have what it takes?Requirements:

All positions require: TS/SCI with Poly

Level 2 Penetration Tester:

Education: Bachelor's Degree or Higher, AND

Pen Tester Experience: 3 years OR High School GED + 5 Years Relevant Experience Associates Degree + 4 Years Relevant Experience Masters or Higher + 2 Years Relevant Experience

Level 3 Penetration Tester:

Education: Bachelor's Degree or Higher, AND

Pen Tester Experience: 4 years OR High School GED + 9 Years Relevant Experience Associates Degree + 7 Years Relevant Experience Masters or Higher + 5 Years Relevant Experience

Level 4 Penetration Tester:

Education: Bachelor's Degree or Higher, AND

Pen Tester Experience: 7 years OR Masters or Higher + 6 Year Relevant Experience

All Level Certifcation Requirement: Minimum Security+

Desired: DoD 8140 - CSSP Incident Responder certification:

• CyberSec First Responder (CFR)
• Cisco Cert. Network Assoc. CyberOps (CCNA CyberOps)
• CompTIA Pen Test+
• CompTIA Cybersecurity Analyst (CySA+)
• Certified Hacking Forensic Investigator (CHFI)
• CCNA Security
• GIAC Forensic Analyst (GCFA)
• GIAC Certified Incident Handler (GCIH)
• SCYBER

Level 2 Penetration Tester:

Education: Bachelor's Degree or Higher, AND

Pen Tester Experience: 3 years OR High School GED + 5 Years Relevant Experience Associates Degree + 4 Years Relevant Experience Masters or Higher + 2 Years Relevant Experience

Level 3 Penetration Tester:

Education: Bachelor's Degree or Higher, AND

Pen Tester Experience: 4 years OR High School GED + 9 Years Relevant Experience Associates Degree + 7 Years Relevant Experience Masters or Higher + 5 Years Relevant Experience

Level 4 Penetration Tester:

Education: Bachelor's Degree or Higher, AND

Pen Tester Experience: 7 years OR Masters or Higher + 6 Year Relevant Experience

Pay Range: VTG's estimated starting pay range is $150,000 - 195,000 annually, which is a general guideline for and depending on the geographic location. When extending an offer, VTG also considers work experience, education, skill level, market considerations and may possibly include contractual requirements which may cause an offer to fall outside of this range