Penetration Tester

Kratos Defense & Security Solutions, Inc.; Washington (District of Columbia); Hybrid; USD 102,000 - 122,000; Full time

Benefits offered by this job

Life/ADD & Short/Long Term Disability

401(k) Savings Plan

Employee Stock Purchase Plan (ESPP)

Paid Time-Off (PTO)

Holidays

Education Reimbursement

Job summary

Kratos Defense & Security Solutions, Inc. is seeking a Penetration Tester for its Commercial Cybersecurity Services division. The role is remote, with expectations to deliver advanced offensive security assessments across networks, cloud, applications, and emerging tech.

The ideal candidate has deep adversary emulation skills and a proven record in leading testing engagements. Required are multiple certifications (OSCP/OSWE/OSCE or CISSP-based), at least three years of cybersecurity experience,

Qualifications

• One or more certifications: OSCP, OSWE, OSEP, OSED, OSCE, OSWA, GXPN, GWAPT, GPEN, CMWAPT, CRTOP or other approved certs.
• R311 certifications include CCNP Security, CASP+ CE, CISSP, CSSLP, CISSP-ISSEP, GPEN, GCED, CEH, CCNA Cyber Ops, CHFI, GCFA, PenTest+, OSCP, OSWE, OSEP, OSWA, eCPPT, eWPT, eWPTX, HTB CPTS, Burp Suite Certified Practitioner.
• Three years of direct, full-time cybersecurity experience.
• An additional two years leading penetration testing as an individual contributor.
• Candidates not meeting all four requirements cannot be considered.

Responsibilities

• Perform penetration testing engagements to simulate cyberattacks on customer systems, cloud solutions, and networks.
• Deliver high-quality client-ready reports and determine scope with minimal oversight.
• Develop automation and new tools to increase testing efficiency.
• Research threats and vulnerabilities to stay current.
• Review tests and reports to clearly explain weaknesses, attack vectors, and remediation steps.
• Create proofs of concept and evidentiary material for customers to follow.
• Provide recommendations for new technologies and system designs based on test results.

Skills

OSCP

OSWE

OSCE

GPEN

CISSP

Burp Suite

Tools

Burp Suite

Job description

Readiness Delivered . Kratos Defense & Security Solutions develops and fields transformative, affordable technology, platforms, and systems for United States National Security related customers, allies, and commercial enterprises. We proactively build trusted relationships with our peers, partners and customers, and take ownership for our actions—always striving to do the right thing. As a Penetration Tester for Kratos’ Commercial Cybersecurity Services division, working in a remote setting, you will serve as a key contributor in delivering advanced offensive security assessments across complex customer environments, including networks, cloud infrastructures, applications, and emerging technologies. This mid-carier role is designed for seasoned ethical hackers who excel at adversary emulation, tactical problem-solving, and producing high-quality, client-ready deliverables with minimal oversight. The ideal candidate brings strong technical expertise, proven experience leading penetration testing engagements, and a commitment to continuous learning, collaboration, and innovation as they help strengthen customer defenses and guide remediation with clarity and precision.

Job Responsibilities

• Perform penetration testing engagements to simulate cyberattacks on customer computer systems, cloud solutions, and scoped networks. Generate deliverables, confirm scope, and execute with minimal oversight.
• Promote an inclusive, learning-focused team by sharing knowledge, promoting best practices, and collaborating to reach consensus on our approach to tactical issues. Work with the team to devise novel tests and scenarios for various penetration tests of emerging technologies.
• Consistently produce high quality, client ready deliverables.
• Develop and implement automation solutions, new tools, or processes to eliminate wasted effort and allow our team to focus on the important issues that require finesse and expertise.
• Research cybersecurity incidents, threats and vulnerabilities to keep up to date.
• Adhere to projects/tasks, scheduling, and quality control by monitoring penetration test execution. Reviews reporting to ensure it thoroughly breaks down and explains all weaknesses and vulnerabilities, their attack vectors and remediation steps in a clear and concise manner.
• Create proofs of concept, documentation, and evidence can be easily followed by customer points of contact. Provide recommendations for new technologies and system designs according to test results.

Experience and Skills

One or more of the following certifications: OSCP, OSWE, OSEP, OSED, OSCE, OSWA, GXPN, GWAPT, GPEN, CMWAPT, and CRTOP or other certifications approved on a case-by-case basis.

• One or more of the following R311 Certifications: CCNP Security, CASP+ CE, CISSP, CSSLP, CISSP-ISSEP, GPEN, GCED, CEH, CCNA Cyber Ops, CHFI, GCFA, CompTIA PenTest+, OSCP, OSWE, OSEP, OSWA, eCPPT, eWPT, eWPTX, HTB CPTS, Burp Suite Certified Practitioner.
• Three years of direct, full time cybersecurity experience.
• An additional two years of experience leading penetration testing activity as an individual contributor.
• Candidates who do not meet all four requirements cannot be considered for this position.

Preferred Skills/Experience

Advanced experience and knowledge of general network testing skills and web application testing, including Open Source Intelligence Gathering, Cloud Configuration Testing, Network Testing & Exploitation, Web Application Exploitation, and Web API Testing.

• Functional knowledge or experience of one or more types of specialized testing, to include: Mobile Applications; Desktop Applications (Mac, Linux, or Windows); Red Team Engagements; Physical Penetration Testing.
• Understanding or experience with the FedRAMP framework and requirements for penetration testing.
• Advanced knowledge of commonly used penetration testing tools and some ability to write scripts or develop rudimentary new tools as needed.
• Qualified candidates should be prepared to use and test new technologies with little notice through effective research and study strategies.
• Comfortable mentoring others on tools, concepts, and methods for conducting penetration testing.
• Prior experience in cybersecurity consulting and/or assessing government systems.
• Close proximity to the Washington D.C. area and willingness to travel on-site.
• Hold an active Secret or Top Secret clearance or willingness to apply for a clearance.

Competitive salary based on experience and education
Salary Range: $102,000-$122,400

Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offerings—from commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.

This posting will close within 90 days from the Posting Date.

• Life/ADD & Short/Long Term Disability Insurance
• 401(k) Savings Plan
• Employee Stock Purchase Plan (ESPP)
• Paid Time-Off (PTO)
• Holidays
• Education Reimbursement

Kratos Defense is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race,color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.

Disability Accessibility Accommodation
If you require an accommodation to navigate or apply to our careers site, please send your request to [e-mail] or call 858-964-2916. Any inquiries not related to requesting an accommodation will be discarded.

Pay Transparency
The company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

Job Applicant Privacy Notice
For applicants in the EU and California residents, please review our privacy notice .