Penetration Tester

Locke & Mccloud; Georgia; Remote; USD 90,000 - 120,000; Full time

Job summary

An innovative cybersecurity consultancy is seeking a skilled Penetration Tester with expertise in GovRAMP and FedRAMP assessments for a fully remote role. This position is perfect for a professional eager to lead impactful projects in federal cybersecurity. You will plan and execute assessments, develop tailored methodologies, and produce high-quality reports to communicate findings effectively. The role also involves mentoring junior team members and cultivating client relationships. Join a dynamic team focused on enhancing cybersecurity standards and making a significant impact in the industry.

Qualifications

• 5+ years of experience in penetration testing, with a focus on GovRAMP/FedRAMP.
• Strong written and verbal communication skills for diverse stakeholders.

Responsibilities

• Plan and execute GovRAMP/FedRAMP penetration testing assessments.
• Produce comprehensive reports articulating findings and remediation strategies.

Skills

Penetration Testing

GovRAMP Assessments

FedRAMP Assessments

Technical Communication

Project Management

Education

OSCP / OSCP+

CompTIA PenTest+

CASP+

Job description

Role:Penetration Tester-GovRAMP/FedRAMP Focus

Location:Fully Remote (Anywhere in the United States)

Salary Range:$90,000 – $120,000

We are working on behalf of a leading U.S.-based cybersecurity consultancy to find aRAMP-experienced Penetration Testerfor a fully remote, full-time role. This is a strategic position for a professional who thrives in regulated environments and is looking to lead meaningful work in support of federal cybersecurity programs.

Key Responsibilities:

• Plan, lead, and execute

  GovRAMP and/or FedRAMP penetration testing assessments, ensuring adherence to regulatory frameworks and client-specific requirements.

• Develop tailored testing methodologies and threat models based on system architecture and data sensitivity.

• Produce comprehensive, high-quality technical and executive-level reports that clearly articulate findings, risks, and remediation strategies.

• Coordinate with client security and compliance teams to validate remediation efforts and assist with mitigation planning.

• Oversee multiple assessment projects simultaneously, managing timelines, deliverables, and client expectations.

• Maintain up-to-date knowledge of the RAMP landscape, including evolving federal compliance standards and assessment best practices.

• Cultivate and manage long-term client relationships, acting as a trusted technical advisor.

• Mentor and support junior penetration testers, contributing to training, skill development, and overall team capability.

Required Qualifications:

• 5+ years of experience in penetration testing, with a

  minimum of 2 years specifically focused on GovRAMP/FedRAMP assessments.

• At least one of the following certifications:

• OSCP / OSCP+

• CompTIA PenTest+

• CASP+

  or other relevant industry-recognized certifications.

• Experience delivering at least

  25 successful penetration testing engagements, preferably in professional services or consulting settings.

• Strong written and verbal communication skills, particularly in translating complex findings for technical and non-technical stakeholders.

• Ability to work independently in a remote environment while managing priorities across multiple concurrent projects.

Interviews are scheduled to take place next week so if you’re interested in hearing more about this and other roles, then please get in touch asap to discuss further at 480-818-6995 or send your Resume to [e-mail]

Locke & McCloud is the US's leading cyber security & information security staffing company – through having a sole focus on the cyber & information security space we have been able to foster solid relationships with some of the US’s most exciting cyber security consultancies & end-users. Our focus on the information security space allows us to be able to help you find the most exciting opportunities in the cyber security market. If you are looking for your next cybersecurity or information security role, please get in touch!