Penetration Tester

Pro2Serve; Lexington (KY); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Major Medical Plan with Prescription

401(k) Retirement Plan

Employee Stock Ownership Program (ESOP

Comprehensive Leave

Holidays

Job summary

ETAS Inc. in Lexington, KY is seeking a Penetration Tester to join the Cyber Security Assessment Team on a direct-hire basis.

The role focuses on testing information systems, risk and vulnerability assessments, and adversarial emulation to support federal and contractor programs. Candidates should have prior penetration testing experience, an IT-related Bachelor's degree, strong reporting skills, and proficiency with tools like nmap, Burp Suite, Metasploit, and Cobalt Strike.

Qualifications

• Bachelor's degree in IT related field and at least 3 years of operational penetration testing experience.
• Ability to lead assessments and communicate with contracting and federal personnel.
• Proficiency with MS Office and producing formal assessment reports.
• Proficiency with listed security tools (nmap, Burp Suite, Metasploit, Cobalt Strike, Tenable, CrowdStrike).
• Experience with programming or scripting languages.

Responsibilities

• Conduct penetration testing and vulnerability assessments on information systems.
• Develop risk mitigation guidance and present findings to leadership.
• Produce formal, well-formatted assessment reports and deliverables.
• Collaborate with operational teams and client personnel during engagements.

Skills

Penetration testing

Oral and written communication

Independent / team work

Professionalism

Reporting & presentation

Education

Bachelor's degree in IT related field

Tools

nmap

Burp Suite

Metasploit

Cobalt Strike

Tenable Security Center

CrowdStrike

Job description

Penetration Tester

Job Code: 2026-ETA-061

Location: Lexington, KY

Division: PPPO DOE Contract

Duration: Direct Hire

Company Description:

ETAS Inc. has upcoming opportunity for a Penetration Tester (Direct Hire) position at our offices in Lexington, KY. Enterprise Technical Assistance Services, Inc. (ETAS) is a wholly owned subsidiary of Professional Project Services, Inc (Pro2Serve). ETAS was formed and dedicated to support the Department of Energy (DOE) Portsmouth/Paducah Project Office (PPPO) with technical and management services contributing to the safe and cost effective implementation of the "One PPPO" mission. The parent company, Pro2Serve, is a nationally recognized environmental, technical, and engineering services firm dedicated to providing critical environmental management services to reduce the Nation's environmental liabilities and infrastructure engineering services in support of our Nation's security. We support the energy, defense, and science markets through responsive, cost-effective execution of critical environmental, facilities and infrastructure, and nuclear defense and nonproliferation projects.

Pro2Serve is an Equal Opportunity Employer (Minorities/Females/Disabled/Veterans).

Job Description

As a critical member of the Cyber Security Assessment Team, this role will engage in the technical testing of logically and geographically separate information systems to support both scheduled and impromptu assessment activities. Activities may include technical risk assessment, vulnerability assessment, penetration testing, application/web security testing, and adversarial emulation. This role will also develop and advise both operational and leadership teams on potential vulnerability mitigation strategies within current industry best practices and federal standards.

Job Requirements

Prior penetration testing experience is required. This is not an entry level position.

Bachelor's degree in an IT related subject matter area from an accredited college or university and have at minimum three years of operational penetration testing experience.

Ability to participate in or lead penetration testing assessments, including professional correspondence with different contracting companies and federal personnel, with minimal management/supervisory oversight.

Proficiency in Microsoft Office Suite, including the development of formal, well-formatted, and grammatically accurate assessment reports and presentations.

Proficiency in common cyber security tools (i.e., nmap, burpsuite, Metasploit, Cobalt Strike, Tenable Security Center, Crowdstrike).

Experience and proficiency with at least one or more programming or scripting languages.

Excellent oral and written communication skills.

Ability to work independently or in a team environment.

Exhibit a high degree of professionalism in the production of deliverables and in interactions with fellow employees and client personnel.

Preferred Qualifications

Knowledge of national security systems and industrial control systems.

Experience with pentesting web applications and cloud environments.

Possess a Certified Information System Security Professional (CISSP), Certified Information Security Manager (CISM), or similar professional certification.

Possess an Offensive Security Certified Professional (OSCP), GIAC Certified Penetration Tester (GPEN), Certified Red Team Operator (CRTO), or equivalent technical certification.

Federal Government Clearance

This position may require the ability to obtain a government clearance. This position may require reviews and test for absence of any illegal drugs along with a background investigation by the Federal government in order to obtain an access authorization prior to employment, and may require subsequent reinvestigations may be required.

EEO Employer

Pro2Serve is an Equal Opportunity Employer (Minorities/Females/Disabled/Veterans).

Benefits

ETAS benefits package has been carefully designed to meet the needs of our employees and their families.

• Major Medical Plan with Prescription Card, Dental Plan, Vision, and Disability Insurance


• Retirement Plan 401(k)


• Employee Stock Ownership Program (ESOP)


• Comprehensive Leave


• Holidays

Job location

Lexington, KY area