Penetration Tester - Cyber Engineer

Peraton; Aberdeen (MD); On-site; USD 70,000 - 95,000; Full time

Job summary

Peraton is seeking a junior penetration tester to join a team delivering cutting-edge security assessments. You will perform hands-on testing and threat-hunting activities on complex systems, leveraging the latest tools and techniques.

The position requires an Active Secret clearance and US citizenship, with on-site work at Aberdeen Proving Ground, MD. You will collaborate with engineers to analyze systems and report findings with actionable remediation steps.

Qualifications

• Active Secret clearance with ability to obtain TS/SCI.
• US citizenship.
• 5 years of experience with BS; 3 years with MS; PhD not required.
• Professional experience in penetration testing or threat hunting.
• Grey and black box penetration testing experience.
• Knowledge of OWASP Top 10, DoD/NSA standards.
• Proficiency with nmap, Wireshark, Burp Suite, Nessus.
• Extensive knowledge of Linux operating systems.
• Exploitation techniques including buffer overflows, SQLi, XSS, lateral movement.
• Strong grasp of networking, TCP/IP, virtualization, and web services.
• Familiarity interfacing with electronic hardware.

Responsibilities

• Perform in-depth assessments and analyses using pen testing and threat hunting techniques.
• Hands-on work with the latest electronics as part of a cross-functional team.

Skills

Penetration testing

Threat hunting

Grey/black box testing

OWASP Top 10 / DoD NSA standards

Networking & TCP/IP

Linux

Exploitation techniques

Virtualization

Web services

Hardware interfacing

Education

Bachelor's degree

Master's degree

Tools

nmap

Wireshark

Burp Suite

Nessus

Job description

Required:

• Active Secret Clearance with the ability to obtain TS/SCI
• US Citizenship
• 5 years of experience with BS/BS; 3 years with MS/MA; 0 years with PhD
• Professional experience in penetration testing or threat hunting
• Proven ability experience in grey and black box penetration testing
• In-depth understanding of OWASP Top 10, DoD, NSA, or industry-standard Vulnerability and- Penetration Testing Standards
• Proficiency with popular penetration testing tools such as nmap, Wireshark, Burp Suite, Nessus, and similar utilities
• Extensive knowledge of Linux operating systems
• Expertise in exploitation techniques including buffer overflows, fuzzing, SQL injection, Man-in-the-Middle attacks, covert channels, secure tunneling, XSS, privilege escalation, and lateral movement
• Strong grasp of networking, TCP/IP, virtualization, and web services
• Familiarity of interfacing with electronic hardware (e.g. taking apart devices and identifying hardware components)

Desired:

• Active TS/SCI
• Certifications such as OSCP, OSCE, GPEN, GWAPT, GXPN, CEH, or CISSP
• Experience in malware analysis or digital computer forensics
• Scripting skills in Bash, Python, Perl, or Ruby
• Systems programming experience
• Keen interest in emerging penetration testing technologies and techniques
• Familiarity with Android operating systems
• Knowledge of UAS/UXS technologies
• Understanding of radios and radio protocols
• Experience analyzing embedded devices
• Development and presentation of proof-of-concepts to demonstrate exploitation techniques

Peraton Labs delivers innovative solutions and revolutionary new capabilities to solve the most difficult and complex challenges for government agencies, utilities, and commercial customers. With a distinguished heritage tracing back to Bell Labs, Bellcore, DHPC, and Telcordia, our experts pave the way.* This position is 100% on site on-site in Aberdeen Proving Ground, MD.

Responsibilities:Become part of an exceptional team of engineers from diverse backgrounds, all united by a passion for tackling real-world problems. As a junior penetration tester, you’ll be at the forefront of cutting‑edge technology, working hands‑on with the latest electronics. Your role will involve performing in-depth assessments and analyses of sophisticated systems using penetration testing and threat-hunting techniques.

#plabs26