Penetration Tester (Hybrid)

Koniag Government Services; Washington (District of Columbia); Hybrid; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan

Paid time off

Paid parental leave

Life and disability insurance

Flexible spending accounts

Commuter benefits

Tuition reimbursement

Job summary

Koniag Operations Services, a Koniag Government Services company, seeks a skilled Penetration Tester to support cybersecurity initiatives for government customers in Washington, DC. The role requires ability to obtain a Public Trust and is Hybrid.

Responsibilities include conducting authorized testing on networks, applications, and infrastructure; writing reports with risk ratings and remediation recommendations; and collaborating with admins, developers, and security teams to validate and

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 3–5 years of penetration testing or offensive security experience.
• Experience with network, web app, and wireless pentests.

Responsibilities

• Perform penetration testing on networks, web apps, mobile apps, and infrastructure to identify weaknesses.
• Conduct vulnerability assessments and exploit identified weaknesses in a controlled, authorized manner.
• Develop and execute test plans including recon, scanning, exploitation, and post-exploitation.

Skills

Communication skills

Networking knowledge

Penetration testing

Scripting (Python, Bash, PowerShell)

Offensive security mindset

Education

Bachelor's degree in Computer Science / Cybersecurity / IT

Tools

Metasploit

Burp Suite

Nmap

Wireshark

Kali Linux

Job description

Koniag Operations Services, a Koniag Government Services company, is seeking a skilled and detail-oriented Penetration Tester to join our cybersecurity team supporting critical security assessment initiatives for KOS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust. This position is Hybrid.

Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits, and tuition reimbursement.

The ideal candidate is a motivated security professional with a strong technical background and ethical mindset, possessing the ability to apply their offensive security skills and analytical expertise to identify vulnerabilities, assess risks, and strengthen the security posture of complex systems and networks.

The Penetration Tester will conduct authorized simulated attacks on systems, networks, and applications to identify security vulnerabilities before malicious actors can exploit them.

Principal responsibilities will include but are not limited to:

• Perform penetration testing on networks, web applications, mobile applications, and infrastructure to identify security weaknesses.
• Conduct vulnerability assessments and exploit identified vulnerabilities in a controlled, authorized manner.
• Develop and execute test plans, including reconnaissance, scanning, exploitation, and post-exploitation activities.
• Utilize industry-standard tools and techniques (e.g., Metasploit, Burp Suite, Nmap, Nessus) to assess system security.
• Write custom scripts and tools to automate testing processes and exploit development as needed.
• Document findings in detailed technical reports, including risk ratings, exploitation methods, and remediation recommendations.
• Present findings and recommendations to technical teams and leadership in a clear, actionable manner.
• Collaborate with system administrators, developers, and security teams to validate and remediate identified vulnerabilities.
• Conduct social engineering assessments, including phishing campaigns, when required.
• Stay current on emerging threats, attack vectors, and penetration testing methodologies.
• Participate in red team/blue team exercises and support purple team collaboration efforts.
• Ensure all testing activities comply with rules of engagement, legal requirements, and organizational policies.
• Support continuous monitoring and security assessment efforts across the enterprise.

Education and Experience:
Required:

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field from an accredited college or university; equivalent experience may be considered in lieu of a degree.
• 3-5 years of experience in penetration testing, ethical hacking, or offensive security roles.
• Demonstrated experience conducting network, web application, and/or wireless penetration tests.
• Experience with scripting languages (e.g., Python, Bash, PowerShell) for tool development and automation.

Required Skills and Competencies:

• Exceptional communication skills – both written and oral – with the ability to translate complex technical findings into actionable business recommendations for both technical and non-technical stakeholders.
• Strong understanding of networking protocols, operating systems (Windows, Linux), and system architectures.
• Hands-on experience with penetration testing tools, including Metasploit, Burp Suite, Nmap, Wireshark, and Kali Linux.
• Knowledge of common vulnerability frameworks, including OWASP Top 10, MITRE ATT&CK, and CVSS scoring.
• Experience conducting both internal and external penetration tests.
• Ability to think creatively and adopt an attacker's mindset to identify non-obvious security weaknesses.
• Strong understanding of security concepts, including encryption, authentication, and access control mechanisms.
• Ability to work independently and manage multiple engagements under tight deadlines.
• Strong report writing skills with attention to detail and accuracy.
• Ability to obtain and maintain a Public Trust Clearance.

Desired Skills and Competencies:

• Experience working in a federal government IT environment supporting security assessments.
• Industry certifications such as OSCP, GPEN, CEH, or CISSP.
• Experience with cloud security assessments (AWS, Azure, GCP).
• Familiarity with red team operations and adversary emulation techniques.
• Knowledge of secure coding practices and application security testing (SAST/DAST).
• Experience with container and Kubernetes security testing.
• Familiarity with compliance frameworks such as NIST 800-53, FedRAMP, or RMF.

Our Equal Employment Opportunity Policy

The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristicprotected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at [e-mail] or by calling 703-488-9377 to request accommodations.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of KGS, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.

Equal Opportunity Employer/Veterans/Disabled.Shareholder Preference in accordance with Public Law 88-352