Penetration Tester

SAIC; Clifton (TX); Presencial; USD 110 000 - 165 000; Tempo integral

Resumo da oferta

SAIC is seeking a Penetration Tester to join our offensive security practice, supporting a major state and local government customer.

You will conduct web, network, and mobile application pentesting, support ethical hacking operations, and provide strategic guidance on enterprise cyber architecture and cloud security. This role blends hands-on testing with leadership and visible impact for clients.

Qualificações

• Advanced cybersecurity and digital forensics expertise
• Experience with web app testing tools and familiarity with mobile testing concepts
• Proven experience in red-teaming, ethical hacking, and cloud security architecture
• Proficiency in malware reverse engineering and enterprise cyber architecture
• Strong background addressing security issues in architectures, firewalls, data traffic and network access
• Hands-on experience conducting iOS and/or Android app assessments
• Familiarity with API security testing (REST, GraphQL, SOAP)
• Experience as an organizational spokesperson and advisor on advanced technical projects
• Experience making decisions on administrative or project work to achieve program goals

Responsabilidades

• Deliver high-quality penetration tests across client environments using black box, white box, web app or mobile methodologies per NICE standards
• Independently manage engagement workloads from scoping through reporting
• Produce clear technical reports communicating findings, risk context, and remediation guidance to technical and executive stakeholders
• Support mobile security assessments (iOS/Android) using MASVS/MSTG framework and grow mobile capabilities
• Contribute to cybersecurity planning following the NICE Framework
• Address security issues across architectures, firewalls, data traffic, and network access
• Present findings to clients and explain business risk to CISOs
• Share knowledge, contribute to internal tooling and improve methodologies

Conhecimentos

Cybersecurity expertise

Digital forensics

Mobile security testing

Cloud security architecture

Red-teaming

Leadership

Formação académica

Bachelor's degree

PhD or JD

Descrição da oferta de emprego

Science Applications International Corporation (SAIC) is seeking a Penetration Tester to join our offensive security practice supporting a major state & local government customer. This role sits at the intersection of hands-on technical execution and cybersecurity leadership and it's built around delivering real impact for clients who depend on us to find what others miss.

Web application & Network penetration testing is the core of what you'll do every day, and we're looking for someone who brings both technical depth and genuine curiosity to every engagement. Beyond web and network pentesting you'll contribute to our mobile application testing practice (iOS and Android), support ethical hacking operations, and provide strategic guidance on enterprise cyber architecture and cloud security. This is a role where your contributions are visible, your growth is intentional, and your voice matters to the team and to the clients we serve.

Key Responsibilities

• Deliver high-quality penetration tests across a range of client environments, applying black box, white box, web app or mobile methodologies as needed and aligned to NIST standards
• Independently manage engagement workloads from scoping through reporting, with a consistent focus on quality
• Produce clear, well-structured technical reports that communicate findings, risk context, and actionable remediation guidance to both technical teams and executive stakeholders and translate complex technical documentation into terms any stakeholder can act on
• Support and contribute to mobile application security assessments (iOS and Android) using the OWASP MASVS/MSTG framework, with the expectation of growing mobile capabilities over time
• Perform strategic planning and management in cybersecurity and digital forensics in alignment with the National Initiative for Cybersecurity Education (NICE) Framework
• Address a wide range of security issues including architectures, firewalls, electronic data traffic, and network access
• Confidently present findings to clients whether it is walking a developer through a vulnerability chain or explaining business risk to a CISO in the same afternoon
• Act as a spokesperson and advisor on advanced technical projects and research; Actively share knowledge with teammates, contribute to internal tooling and methodology improvements, and help close skill gaps across the practice

Qualifications

• Bachelors and nine (9) years or more experience; PhD or JD and four (4) years or more related experience. Candidates must be a US Citizen and able to pass a CJIS Criminal Justice background investigation and maintain CJIS clearance throughout employment term.
• Advanced technical knowledge in cybersecurity and digital forensics
• Proficiency with standard web application testing tools (e.g., Working familiarity with mobile application testing concepts and tooling (e.g., Proven experience in red-teaming, ethical hacking, and cloud security architecture
• Proficiency in malware reverse engineering and enterprise cyber architecture
• Strong background in addressing security issues related to architectures, firewalls, electronic data traffic, and network access
• Hands-on experience conducting iOS and/or Android application assessments
• Familiarity with API security testing (REST, GraphQL, SOAP)
• Experience serving as an organizational spokesperson and advisor on advanced technical projects
• Experience making decisions on administrative or project work matters to achieve program or organizational objectives

SAIC is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

For ongoing news, please visit our newsroom.