Penetration Tester

Acuity, Inc.; United States; On-site; USD 175,000 - 200,000; Full time

Benefits offered by this job

Health/Dental/Vision

Training & development benefit

401K matching

Corporate events/team-building

Job summary

Acuity, Inc. is seeking a Penetration Tester to conduct internal penetration testing of servers, web applications, services and databases, and to perform security reviews with reporting to strengthen defense measures.

The role requires rigorous testing, documentation and clear communication of findings to technical and non-technical stakeholders. The position supports federal engagements, and candidates should have TS/SCI w/Poly clearance.

Qualifications

• Experience with NIST 800-53 and RMF controls.
• Ability to coordinate with developers, system admins, PMs and senior government stakeholders.

Responsibilities

• Conduct internal penetration testing of servers, web apps, services and databases.
• Perform security reviews, research and provide reporting to improve defenses.
• Manually exploit and compromise operating systems, web apps and databases.
• Review scan results and static code analysis to identify vulnerabilities.
• Identify misconfigurations and compliance gaps.
• Write final reports with risk, mitigation and references.
• Provide security recommendations for developers, admins and managers.
• Report vulnerabilities identified during assessments.
• Draft RoE, Test Plans and SOPs for engagements.

Skills

NIST 800-53 RMF

Audience coordination

Tools

AWS Cloud Security

Job description

Overview

Acuity is growing and looking to hire a

Penetration Tester.

In return, Acuity Inc offers a great company culture with wonderful work/life balance and a robust compensation package which includes Health/Dental/Vision, up to $6K training & professional development benefit annually, 401K matching, corporate events/team-building and more!

Overview

Acuity is growing and looking to hire a Penetration Tester. In return, Acuity Inc offers a great company culture with wonderful work/life balance and a robust compensation package which includes Health/Dental/Vision, up to $6K training & professional development benefit annually, 401K matching, corporate events/team-building and more! Acuity was awarded "Best Places to Work" by the Washington Business Journal for over 8 years(2010 - 2014, 2015, 2017-2021, 2023, 2024) and "Top Workplaces" by Washington Post (2022, 2023, 2024). www.myacuity.com

Why Acuity?

Are you ready to use your expertise in the areas of IT Modernization, Data Enablement, and Hyperautomation to make a real difference? Join Acuity, Inc., a technology consulting firm that supports federal agencies. We combine industry partnerships and long-term federal experience with innovative technical leadership to support our customers’ critical missions.

Responsibilities

What you 'll be doing:

• Conduct internal penetration testing and vulnerability assessment of servers, web applications, web services, and databases
• Conduct security reviews, technical research, and provided reporting to increase security defense mechanisms
• Manually exploit and compromise operating systems, web applications, and databases
• Examine results of web/OS scanners, scans and static source code analysis
• Identify vulnerabilities, misconfigurations, and compliance issues
• Write final reports, defend all findings to include the risk or vulnerability, mitigation strategies, and references
• Provide security recommendations for developers, system administrators, project managers, and senior government stakeholders
• Report vulnerabilities identified during security assessments
• Write penetration testing Rules of Engagements (RoE), Test Plans, and Standard Operating Procedures (SOP)

Qualifications

Required Skills:

• Experience with NIST 800-53 and Risk Management Framework
• Ability to meet and coordinate with various audiences to include developers, system administrators, project managers, and senior government stakeholders

Desired Skills

• Experience with AWS Cloud Security
• Strong writing skills
• Certifications: CEH – Certified Ethical Hacker Certification, CPT – Certified Penetration Tester

Clearance Requirements

• TS/SCI w/Poly

About Acuity

Acuity, Inc. is a leading management and technology consulting firm that specializes in serving the federal government. Our innovative, collaborative and rewarding work environment has earned repeat honors from the Washington Business Journal’s Best Places to Work and SmartCEO Corporate Culture awards.

Why Choose Acuity?

• Innovative Excellence: Recognized by The Washington Post's "Top Workplaces" and a nine-time recipient of the Washington Business Journal's "Best Places to Work," Acuity fosters an environment where innovation thrives and employees flourish.
• Competitive Compensation: We value our employees and show it through highly competitive compensation and benefits packages.
• Personal Growth: Your potential isn't just recognized at Acuity, it's actively cultivated. With tailored training, mentorship, and cutting-edge resources, we empower you to thrive personally and professionally.
• Recognition and Visibility: Stand out in a competitive industry with Acuity's exceptional customer feedback and robust opportunity channels.
• Collaborative Culture: At Acuity, teamwork isn't just a buzzword – it's the cornerstone of our success. Encouragement and support fuel our collaborative culture, where every voice matters.
• Diversity and Inclusion: Diversity isn't just a checkbox – it's who we are. At Acuity, we pride ourselves on recruiting and maintaining a workforce that celebrates diversity and treats every employee with dignity and respect.

Join Acuity, where your talents are valued, your growth is nurtured, and your impact is amplified. Together, let's shape the future of digital strategy and technology consulting.

Min

USD $175,000.00/Yr.

Max

USD $200,000.00/Yr.

Salary Range

The salary range for this position represents Acuity's good faith estimate of the compensation for this job title at the time of posting. Final compensation will be determined based on factors including, but not limited to, the candidate's qualifications, experience, education, certifications, skills, geographic location, contract requirements, applicable labor categories, and, where applicable, contract award and funding.