Penetration Tester Journeyman

onezerollc; Alexandria (VA); Hybrid; USD 80,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with company matching

Paid time off

Holidays

Employee referral program

Educational assistance

Job summary

OneZero Solutions, LLC is seeking a Penetration Tester Journeyman in Alexandria, VA hybrid. Requires Active Top Secret with SCI eligibility clearance. You will conduct adversary simulations, deploy C2 frameworks, and perform internal/external testing across networks, apps, and AD paths.

Strong scripting and malware bypass knowledge is expected. The role involves cloud and on‑prem infrastructure work, and you’ll develop reports with findings and recommendations for DoD cyber defense teams.

Qualifications

• 2 to 3 years of relevant experience.
• Hands on experience with computers and network security.
• Experience conducting phishing campaigns or social engineering.
• Hands on experience with red team tasks and pen testing.
• Familiarity with malware development and EDR/AV bypass strategies.
• Experience with PowerShell, C, C++, or Python.
• Hands on experience utilizing Command and Control (C2) Frameworks such as Cobalt Strike, Sliver, Havoc, etc.

Responsibilities

• Deploy, configure, and operate C2 frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.
• Monitor, manage, and maintain cloud and on-premise infrastructure used during assessments.
• Internal and external penetration testing.
• Network mapping and enumeration; assess web and mobile applications.
• Perform database scans and assess Active Directory attack paths using BloodHound.

Skills

Red team testing

Penetration testing

Phishing campaigns

PowerShell

C

C++

Python

C2 frameworks

Network security

Education

BA/BS or equivalent

IAT II

IAT level III

GPEN

RTAC (Red Team Apprentice Course)

CompTIA Security+ CE

CompTIA CySA+

CCNA Security

GICSP

GSEC

SSCP

CISSP (or Associate)

CISA

CCNP Security

GCED

GCIH

Tools

Cobalt Strike

Sliver

Havoc

Mythic

Job description

We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance.

Additional details are available on our website: https://www.onezerollc.com/careers/

Position Title

Penetration Tester Journeyman

Location

Alexandria, VA Hybrid

Clearance

Active Top Secret with SCI eligibility security clearance

Adversary Simulation

• Deploy, configure, and operate C2 frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.
• Apply TTPs for initial access, lateral movement, privilege escalation, persistence and data exfiltration.
• Leverage proprietary and open-source offensive security tool sets effectively to achieve engagement objectives.
• Execute phishing assessments.

Infrastructure

• Monitor, manage, and maintain cloud and on-premise infrastructure used during assessments.
• Understanding the use of Git Repositories for maintaining operational tools and scripts.

Penetration Testing

• Internal and external penetration testing.
• Network mapping and enumeration.
• Assess web and mobile applications.
• Perform database scans.
• Assess Active Directory attack paths using tools such as BloodHound.

Security Assessments

• Assessing Coast Guard's cyber security posture of operational networks through adversary emulation.
• Develop reports and briefs detailing findings and recommendations for all assessments completed.
• Perform cyber threat emulation during scripted exercises, to train DoD Cyber Protection Teams

Required Qualifications

• Relevant Years of Experience: 2 to 3 years
• Hands on experience with computers and network security.
• Experience conducting phishing campaigns or social engineering.
• Hands on experience with red team tasks and pen testing.
• Familiarity with malware development and EDR/AV bypass strategies.
• Experience with PowerShell, C, C++, or Python.
• Hands on experience utilizing Command and Control (C2) Frameworks such as Cobalt Strike, Sliver, Havoc, etc.

Certifications

IAT II : Any one of the following

• GPEN, Red Team Apprentice Course (RTAC), or equivalent
• Examples or required certifications: IAT level II:
• CompTIA Security+ CE
• CompTIA CySA+
• CCNA Security
• GICSP
• GSEC
• SSCP

IAT level III

• CASP+ CE (also called SecurityX)
• CISSP (or Associate)
• CISA
• CCNP Security
• GCED
• GCIH

Education

BA/BS or equivalent years of relevant experience

OneZero Solutions, LLC is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.

To request an accommodation, please contact us at [e-mail] or call [phone].