Penetration Tester Journeyman – Hybrid, TS/SCI Eligible

OneZero Solutions; Alexandria (VA); Hybrid; USD 110,000 - 120,000; Full time

Benefits offered by this job

Health, Dental, Vision, Life Insurance

401(k) with company matching

Paid time off and holidays

Employee referral program

Educational assistance

Job summary

OneZero Solutions, LLC is seeking a Penetration Tester Journeyman in Alexandria, VA with hybrid work arrangements and an active Top Secret with SCI eligibility clearance. The role covers adversary simulation, infrastructure, and penetration testing to assess DoD cyber readiness.

Responsibilities include executing phishing campaigns, leveraging C2 frameworks, and delivering actionable reports. The team emphasizes secure, mission-focused outcomes and ongoing professional growth.

Qualifications

• Hands-on security and network defense experience.
• Experience with phishing campaigns or social engineering.
• Red team and pen-testing experience.
• Familiarity with malware development and EDR/AV bypass.
• Proficient in PowerShell, C, C++, or Python.
• Experience using C2 frameworks such as Cobalt Strike, Sliver, Havoc.

Responsibilities

• Adversary emulation to assess Coast Guard network resilience.
• Develop reports and briefs with findings and recommendations.
• Scripted cyber threat emulation exercises to train DoD teams.
• Coordinate with teams on security assessments and deliverables.
• Monitor and manage tools during engagements.

Skills

PowerShell

Python

C/C++

Red team

Penetration testing

Phishing campaigns

C2 frameworks

EDR bypass

Network security

Education

BA/BS or equivalent

GPEN

CISSP

CISA

GCED

Tools

Cobalt Strike

Sliver

Havoc

Mythic

BloodHound

Job description

OneZero Solutions, LLC is seeking a Penetration Tester Journeyman in Alexandria, VA with hybrid work arrangements and an active Top Secret with SCI eligibility clearance. The role covers adversary simulation, infrastructure, and penetration testing to assess DoD cyber readiness.

Responsibilities include executing phishing campaigns, leveraging C2 frameworks, and delivering actionable reports. The team emphasizes secure, mission-focused outcomes and ongoing professional growth.