Penetration Tester

Kratos Space Training & Cyber; Virginia (MN); On-site; USD 102,000 - 122,000; Full time

Job summary

Kratos Defense & Security Solutions is seeking a Penetration Tester for its Commercial Cybersecurity Services division. This remote, mid-career role focuses on offensive security assessments across networks, cloud, applications, and emerging tech, delivering client-ready results with minimal oversight.

Ideal candidates have multiple certifications (OSCP/OSWE/CEH/GPEN, etc.), at least three years of direct cybersecurity experience, and two years leading testing activities.

Qualifications

• Three years of direct, full-time cybersecurity experience.
• Two years of experience leading penetration testing activity as an individual contributor.
• Candidates must meet all listed requirements to be considered.

Responsibilities

• Perform penetration testing engagements to simulate cyberattacks on customer environments and provide client-ready deliverables.
• Develop and implement automation solutions to improve testing efficiency.
• Research threats and maintain up-to-date knowledge of vulnerabilities and remediation steps.
• Create proofs of concept, documentation, and evidence that can be followed by customer POCs.

Skills

Certifications list

Cybersecurity experience

Team leadership

Job description

Readiness Delivered. Kratos Defense & Security Solutions develops and fields transformative, affordable technology, platforms, and systems for United States National Security related customers, allies, and commercial enterprises. We proactively build trusted relationships with our peers, partners and customers, and take ownership for our actionsialways striving to do the right thing. As aiPenetration Tester for Kratos Commercial Cybersecurity Services division, working in a remote setting, youiwill serve as a key contributor in delivering advanced offensive security assessments across complex customer environments, including networks, cloud infrastructures, applications, and emerging technologies. This mid?career role is designed for seasoned ethical hackers who excel at adversary emulation, tactical problem?solving, and producing high?quality, client?ready deliverables with minimal oversight. The ideal candidate brings strong technical expertise, proven experience leading penetration testing engagements, and a commitment to continuous learning, collaboration, and innovation as they help strengthen customer defenses and guide remediation with clarity and precision.

Job Responsibilities

• Perform penetration testing engagements to simulate cyberattacks on customer computer systems, cloud solutions, and scoped networks. Generate deliverables, confirm scope, and execute with minimal oversight.
• Promote an inclusive, learning-focused team by sharing knowledge, promoting best practices, and collaborating to reach consensus on our approach to tactical issues. Work with the team to devise novel tests and scenarios for various penetration tests of emerging technologies.
• Consistently produce high quality, client ready deliverables.
• Develop and implement automation solutions, new tools, or processes to eliminate wasted effort and allow our team to focus on the important issues that require finesse and expertise.
• Research cybersecurity incidents, threats and vulnerabilities to keep up to date.
• Adhere to projects/tasks, scheduling, and quality control by monitoring penetration test execution. Reviews reporting to ensure it thoroughly breaks down and explains all weaknesses and vulnerabilities, their attack vectors and remediation steps in a clear and concise manner.
• Create proofs of concept, documentation, and evidence can be easily followed by customer points of contact. Provide recommendations for new technologies and system designs according to test results.

Required Experience

• One or more of the following certifications: OSCP, OSWE, OSEP, OSED, OSCE, OSWA, iGXPN, GWAPT, GPEN, CMWAPT, and CRTOP or other certifications approved on a case-by-case basis.

• One or more of the following R311 Certifications: CCNP Security, CASP+ CE, CISSP, CSSLP, CISSP-ISSEP, GPEN, GCED, CEH, CCNA Cyber Ops, CHFI, GCFA, CompTIA PenTest+, OSCP, OSWE, OSEP, OSWA, eCPPT, eWPT, eWPTX, HTB CPTS, Burp Suite Certified Practitioner.
• Three years of direct, full time cybersecurity experience.
• An additional two years of experience leading penetration testing activity as an individual contributor.
• Candidates who do not meet all four requirements cannot be considered for this position.

Preferred Skills/Experience

• Advanced experience and knowledge of general network testing skills and web application testing, including Open Source Intelligence Gathering, Cloud Configuration Testing, Network Testing & Exploitation, Web Application Exploitation, and Web API Testing.

• Functional knowledge or experience of one or more types of specialized testing, to include: Mobile Applications; Desktop Applications (Mac, Linux, or Windows); Red Team Engagements; Physical Penetration Testing.
• Understanding or experience with the FedRAMP framework and requirements for penetration testing.
• Advanced knowledge of commonly used penetration testing tools and some ability to write scripts or develop rudimentary new tools as needed.
• Qualified candidates should be prepared to use and test new technologies with little notice through effective research and study strategies.
• Comfortable mentoring others on tools, concepts, and methods for conducting penetration testing.
• Prior experience in cybersecurity consulting and/or assessing government systems.
• Close proximity to the Washington D.C. area and willingness to travel on-site.
• Hold an active Secret or Top Secret clearance or willingness to apply for a clearance.

LI-Remote

The grade-based pay range for this job is listed below. Individual salaries within that range are determined through a wide variety of factors including but not limited to education, experience, knowledge, and skills.

Competitive salary based on experience and education Salary Range: $102,000-$122,400

Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offeringsifrom commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.

This posting will close within 90 days from the Posting Date.

From: Kratos Defense