Penetration Tester

Phase2 Technology; Fort Meade (MD); Hybrid; USD 86,900 - 198,000; Full time

Job summary

Phase2 Technology in Fort Meade, Maryland, is seeking a Penetration Tester to conduct testing and analysis to identify vulnerabilities in systems and networks. The role involves developing exploits and engineering attack methodologies, leveraging advanced advisory skills and technical expertise.

The ideal candidate will have 3+ years of experience with MITRE ATT&CK system assessments, cyber penetration testing, and various operating systems. A Secret clearance is required for this position.

Qualifications

• 3+ years of experience with MITRE ATT&CK and security assessments.
• 3+ years of experience in cyber penetration testing.
• 3+ years of experience operating in various environments.

Responsibilities

• Conduct testing to identify vulnerabilities in systems.
• Develop exploits and engineer attack methodologies.
• Mentor and supervise team members as needed.

Skills

Experience with MITRE ATT&CK

Cyber penetration testing

Operating in Linux and Windows

Computer attack methods

Network security analysis

Education

HS diploma or GED

Bachelor's degree in CS or related field

Job description

Job Number: R0243365

Penetration Tester

The Opportunity

Conduct testing and analysis to identify vulnerabilities and potential threat vectors in systems and networks, develop exploits, and engineer attack methodologies. Leverage understanding of MITRE ATT&CK and common cybersecurity control implementations to plan and conduct threat‑based assessments. Apply advanced advising skills, extensive technical expertise, and full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction, and mentor and supervise team members, as needed.

Qualifications

• 3+ years of experience with MITRE ATT&CK, test planning and security control assessment
• 3+ years of experience with cyber penetration testing or developing risk and threat mitigation plans
• 3+ years of experience operating in Linux, Windows, and virtual platforms
• 3+ years of experience with computer attack methods and system exploitation techniques
• 3+ years of experience leveraging adversarial tactics to conduct hands‑on security testing
• 3+ years of experience performing network security analysis, including software or traffic analysis
• Secret clearance
• HS diploma or GED

Nice to have

• Experience with Breach and Attack Simulation tools such as Atomic Red Team, Scythe, Mandiant ASV or AttackIQ
• Experience manually auditing source code, including Java, Ruby, Python, JavaScript, Rust, or C, to find security issues
• Experience with system security engineering and security architecture
• Knowledge of tools, tactics, and techniques targeting Artificial Intelligence (AI) systems and their ecosystems
• Bachelor's degree in CS, Information Systems, Engineering, or a related field
• Offensive Security Certified Professional (OSCP), HTB Certified Penetration Tester Specialist (CPTS), eLearnSecurity Junior Penetration Tester (EJPT), GIAC Global Information Assurance Penetration Tester (GPEN), or GIAC Cloud Penetration Tester Certification

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Compensation

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract‑specific affordability and organizational requirements. The projected compensation range for this position is $86,900.00 to $198,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees.

Work Model

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

EEO Statement

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.