Penetration Tester — Federal Cybersecurity Expert (Hybrid)

Attainx,inc-; Silver Spring (MD); Hybrid; USD 125,000 - 145,000; Full time

Benefits offered by this job

Paid vacation

Medical

Dental

Vision

Matching 401K plan

Tuition/training reimbursement

Long & Short-Term Disability

Job summary

AttainX Inc. is seeking a seasoned IT Security Specialist – Penetration Tester to join our cyber security program supporting a U.S. federal government client.

The role requires hands-on testing across AWS, Azure and on‑prem environments, with strong experience in Burp Suite, Metasploit and RMF. Hybrid work in the Silver Spring area is expected, with US citizenship and Moderate Public Trust readiness. The ideal candidate will lead penetration testing efforts, report findings, and develop

Qualifications

• A minimum of 5 years of proven penetration testing and ethical hacking experience.
• Hands-on experience in penetration testing across AWS, Azure, and On-Premise environments.
• 5+ years using IT security tools: Burp Suite, Metasploit, Wireshark.
• 5+ years with enterprise architecture methodologies, concepts and tools.
• 5+ years applying NIST guidance and contingency planning best practices.
• 5+ years using tools like Tenable Security Center, ArcSight, IBM BigFix.
• 5+ years conducting penetration tests or coordinating external testers.
• 5+ years performing RMF assessments on Federal Information Systems.
• Certifications: CISSP, CISA, GCIH, GSNA, CEH, CGRC, SCNP, SCNA.
• Ability to multitask, manage projects, adapt to priorities, and work in a team.

Responsibilities

• Perform protocol analysis, vulnerability discovery and exploitation, and post-exploitation impact analysis.
• Analyze software architectures, security, protocols, virtualization and hardware with engineers to resolve issues.
• Conduct manual and automated firmware analysis on target devices.
• Carry out pen tests, fuzzing and custom exploits against client systems.
• Review architectures and topologies for regulatory compliance and security mandates.
• Produce security reports for regulatory bodies.
• Conduct scenario-based security testing and red team activities to identify gaps.
• Research and test in support of client requirements and security needs.
• Design, integrate and support security solutions and company products.
• Analyze information systems and implement protective measures against unauthorized access.

Skills

Penetration testing

AWS

Azure

On-Premise

Burp Suite

Metasploit

Wireshark

Enterprise architecture

NIST guidelines

Tenable Security Center

ArcSight

IBM BigFix

RMF

CISSP

CISA

GCIH

GSNA

CEH

CGRC

SCNP

SCNA

Multitasking

Project management

Adaptability

Team player

Education

Bachelor's degree in a related field

Tools

Burp Suite

Metasploit

Wireshark

Tenable Security Center

ArcSight

IBM BigFix

Job description

AttainX Inc. is seeking a seasoned IT Security Specialist – Penetration Tester to join our cyber security program supporting a U.S. federal government client.

The role requires hands-on testing across AWS, Azure and on‑prem environments, with strong experience in Burp Suite, Metasploit and RMF. Hybrid work in the Silver Spring area is expected, with US citizenship and Moderate Public Trust readiness. The ideal candidate will lead penetration testing efforts, report findings, and develop