Penetration Tester

Booz Allen Hamilton; Fort Meade (MD); On-site; USD 86,900 - 198,000; Full time

Benefits offered by this job

Health benefits

Tuition assistance

Professional development

Job summary

Booz Allen Hamilton is seeking a Penetration Tester in Fort Meade, Maryland. The role involves identifying vulnerabilities in systems and networks, developing exploits, and mentoring team members. Candidates should have significant experience with MITRE ATT&CK and penetration testing.

Successful candidates will possess a deep technical expertise and have a strong commitment to addressing cybersecurity challenges. Benefits include health and retirement plans, professional development, and leave options to support work-life balance.

Qualifications

• 3+ years of experience with MITRE ATT&CK, test planning and security control assessment.
• 3+ years of experience with cyber penetration testing or developing risk and threat mitigation plans.
• 3+ years of experience operating in Linux, Windows, and virtual platforms.

Responsibilities

• Conduct testing and analysis to identify vulnerabilities in systems and networks.
• Develop exploits and engineer attack methodologies.
• Mentor and supervise team members as needed.

Skills

MITRE ATT&CK

Cyber penetration testing

Linux

Windows

Network security analysis

Secret clearance

Education

HS diploma or GED

Bachelor's degree in CS, Information Systems, Engineering or related field

Tools

Breach and Attack Simulation tools

Java

Python

JavaScript

Rust

C

Job description

Penetration Tester

Conduct testing and analysis to identify vulnerabilities and potential threat vectors in systems and networks, develop exploits, and engineer attack methodologies. Leverage MITRE ATT&CK and common cybersecurity control implementations to plan and conduct threat-based assessments. Apply advanced advising skills, extensive technical expertise, and full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction, and mentor and supervise team members, as needed.

Qualifications

• 3+ years of experience with MITRE ATT&CK, test planning and security control assessment
• 3+ years of experience with cyber penetration testing or developing risk and threat mitigation plans
• 3+ years of experience operating in Linux, Windows, and virtual platforms
• 3+ years of experience with computer attack methods and system exploitation techniques
• 3+ years of experience leveraging adversarial tactics to conduct hands‑on security testing
• 3+ years of experience performing network security analysis, including software or traffic analysis
• Secret clearance
• HS diploma or GED

Nice to Have

• Experience with Breach and Attack Simulation tools such as Atomic Red Team, Scythe, Mandiant ASV or AttackIQ
• Experience manually auditing source code, including Java, Ruby, Python, JavaScript, Rust, or C, to find security issues
• Experience with system security engineering and security architecture
• Knowledge of tools, tactics, and techniques targeting Artificial Intelligence (AI) systems and their ecosystems
• Bachelor's degree in CS, Information Systems, Engineering, or a related field
• Offensive Security Certified Professional (OSCP), HTB Certified Penetration Tester Specialist (CPTS), eLearnSecurity Junior Penetration Tester (EJPT), GIAC Global Information Assurance Penetration Tester (GPEN), or GIAC Cloud Penetration Tester Certification

Compensation

The projected compensation range for this position is $86,900.00 to $198,000.00 (annualized USD). Salary is determined by various factors, including location, education, knowledge, skills, competencies, experience and contract‑specific affordability and organizational requirements.

Benefits

Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.