Penetration Tester

Acuity INC; Virginia; Sur place; USD 175 000 - 200 000; Plein temps

Avantages offerts par ce poste

Health/Dental/Vision

Training & professional development

401K matching

Corporate events

Résumé du poste

Acuity, Inc. is seeking a Penetration Tester to join a federal-focused technology consulting team. You will perform internal and external penetration testing, security assessments, and vulnerability management across servers, web apps, and databases.

The role requires experience with NIST 800-53/RMF, AWS Cloud Security, and strong technical writing. TS/SCI with Poly clearance is a stated requirement, and compensation is highly competitive with comprehensive benefits.

Qualifications

• Experience with NIST 800-53 and Risk Management Framework.
• Ability to meet and coordinate with various audiences including developers, sysadmins, PMs, and government stakeholders.
• Experience with AWS Cloud Security.
• Strong writing skills. Certifications: CEH and CPT.

Responsabilités

• Conduct internal penetration testing of servers, web apps, services, and databases.
• Perform security reviews, research, and provide reporting to improve defenses.
• Manually exploit and compromise operating systems, web apps, and databases.
• Analyze results from web/OS scanners and static analysis.
• Identify vulnerabilities, misconfigurations, and compliance issues.
• Write final reports detailing findings, risks, mitigations, and references.
• Provide security recommendations for developers, admins, PMs, and stakeholders.
• Report vulnerabilities identified during assessments.
• Draft RoE, test plans, and SOPs for penetration testing.

Connaissances

NIST 800-53 RMF

Audience coordination

AWS Cloud Security

Strong writing skills

CEH

CPT

Description du poste

Overview

Acuity is growing and looking to hire a Penetration Tester.

In return, Acuity Inc offers a great company culture with wonderful work/life balance and a robust compensation package which includes Health/Dental/Vision, up to $6K training & professional development benefit annually, 401K matching, corporate events/team-building and more!

Acuity was awarded "Best Places to Work" by the Washington Business Journal for over 8 years(2010 - 2014, 2015, 2017-2021, 2023, 2024) and "Top Workplaces" by Washington Post (2022, 2023, 2024). www.myacuity.com

Why Acuity?

Are you ready to use your expertise in the areas of IT Modernization, Data Enablement, and Hyperautomation to make a real difference? Join Acuity, Inc., a technology consulting firm that supports federal agencies. We combine industry partnerships and long-term federal experience with innovative technical leadership to support our customers' critical missions.

Responsibilities

What you 'll be doing:

• Conduct internal penetration testing and vulnerability assessment of servers, web applications, web services, and databases
• Conduct security reviews, technical research, and provided reporting to increase security defense mechanisms
• Manually exploit and compromise operating systems, web applications, and databases
• Examine results of web/OS scanners, scans and static source code analysis
• Identify vulnerabilities, misconfigurations, and compliance issues
• Write final reports, defend all findings to include the risk or vulnerability, mitigation strategies, and references
• Provide security recommendations for developers, system administrators, project managers, and senior government stakeholders
• Report vulnerabilities identified during security assessments
• Write penetration testing Rules of Engagements (RoE), Test Plans, and Standard Operating Procedures (SOP)

Qualifications

Required Skills:

• Experience with NIST 800-53 and Risk Management Framework
• Ability to meet and coordinate with various audiences to include developers, system administrators, project managers, and senior government stakeholders

Desired Skills:

• Experience with AWS Cloud Security
• Strong writing skills

Certifications:

• CEH - Certified Ethical Hacker Certification, CPT - Certified Penetration Tester

Clearance Requirements:

TS/SCI w/Poly

About Acuity:

Acuity, Inc. is a leading management and technology consulting firm that specializes in serving the federal government. Our innovative, collaborative and rewarding work environment has earned repeat honors from the Washington Business Journal's Best Places to Work and SmartCEO Corporate Culture awards.

Why Choose Acuity?

• Innovative Excellence : Recognized by The Washington Post's "Top Workplaces" and a nine-time recipient of the Washington Business Journal's "Best Places to Work," Acuity fosters an environment where innovation thrives and employees flourish.
• Competitive Compensation : We value our employees and show it through highly competitive compensation and benefits packages.
• Personal Growth : Your potential isn't just recognized at Acuity, it's actively cultivated. With tailored training, mentorship, and cutting-edge resources, we empower you to thrive personally and professionally.
• Recognition and Visibility : Stand out in a competitive industry with Acuity's exceptional customer feedback and robust opportunity channels.
• Collaborative Culture : At Acuity, teamwork isn't just a buzzword - it's the cornerstone of our success. Encouragement and support fuel our collaborative culture, where every voice matters.
• Diversity and Inclusion : Diversity isn't just a checkbox - it's who we are. At Acuity, we pride ourselves on recruiting and maintaining a workforce that celebrates diversity and treats every employee with dignity and respect.

Join Acuity, where your talents are valued, your growth is nurtured, and your impact is amplified. Together, let's shape the future of digital strategy and technology consulting.

Salary Range

Min USD $175,000.00/Yr.

Max USD $200,000.00/Yr.

The salary range for this position represents Acuity's good faith estimate of the compensation for this job title at the time of posting. Final compensation will be determined based on factors including, but not limited to, the candidate's qualifications, experience, education, certifications, skills, geographic location, contract requirements, applicable labor categories, and, where applicable, contract award and funding.