Penetration Tester (HVA) & Adversary Emulation Lead

Cybersecurity Jobs; Beltsville (MD); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Onsite role

Job summary

System One is seeking a Pentest Operator / Penetration Tester to lead offensive assessments for High Value Asset (HVA) systems in a Beltsville, MD onsite role. You will conduct internal and external testing, adversary emulation, and executive-ready reporting to strengthen client security posture.

Responsibilities include network, web app, and enterprise testing, developing test plans, and mapping attack paths within approved ROE.

Qualifications

• Active, maintained Top Secret clearance.
• Bachelor’s degree in Cybersecurity, IT, CS, or IS.
• 5+ years hands-on pentesting or offensive security work.
• Experience with internal/external network testing and web-app testing.
• Experience with Active Directory, Windows, Linux, and enterprise services.

Responsibilities

• Perform pentesting across internal/external networks, web apps, cloud-connected systems and mission environments.
• Support HVA cybersecurity assessments by identifying exploitable vulnerabilities and validating controls.
• Conduct mapping, recon, vulnerability validation, exploitation, post-exploitation analysis, and document attack paths.
• Draft/test engagement plans, scope, and procedures for management approval.
• Conduct external testing to assess attacker access, exfiltration within scope.
• Conduct internal testing focusing on privilege escalation, lateral movement, persistence, and AD attack paths.
• Support red team/adversary emulation with realistic threat activity and C2 simulations.
• Test web applications against OWASP Top 10 and related weaknesses.
• Utilize tools within approved boundaries to analyze threats and validate detections.
• Produce evidence-based reports with findings, impact, and remediation.

Skills

Penetration testing

Adversary emulation

Executive reporting

Offensive security

Red team

Education

Bachelor's cybersecurity

Information technology

Computer science

Information systems

Tools

Kali Linux

Burp Suite

Metasploit

Nmap

Nessus

Wireshark

BloodHound

Impacket

Responder

Hashcat

John the Ripper

CrackMapExec

Cobalt Strike

Sliver

Job description

System One is seeking a Pentest Operator / Penetration Tester to lead offensive assessments for High Value Asset (HVA) systems in a Beltsville, MD onsite role. You will conduct internal and external testing, adversary emulation, and executive-ready reporting to strengthen client security posture.

Responsibilities include network, web app, and enterprise testing, developing test plans, and mapping attack paths within approved ROE.