Penetration Tester - Mid Level, National Security

gdit; Ashburn (VA); On-site; USD 108,000 - 129,000; Full time

Job summary

GDIT is seeking a Penetration Tester to support CBP Cyber Security Directorate, focusing on hands-on testing across networks, apps, and cloud, with industry-standard tools. The role emphasizes vulnerability discovery, reporting, and risk-based remediation in a high-stakes, national-security context.

You will work within a mission-critical team, leveraging offensive security practices, and contribute to zero-trust modernization, incident response, and ongoing risk assessment efforts.

Qualifications

• Minimum of three (3) years of penetration testing or offensive security experience.
• Strong understanding of exploit development concepts, offensive tooling, and common security weaknesses.
• Experience performing network, application, and wireless assessments using modern red-team methodologies.

Responsibilities

• Conduct hands-on penetration testing of networks, applications, endpoints, cloud workloads, and mission systems.
• Use industry-standard tools to identify misconfigurations and exploitable flaws.
• Perform credentialed and non-credentialed testing including recon, enumeration, exploitation, and validation.
• Evaluate vulnerabilities for exploitability, impact, and risk.
• Analyze hybrid cloud/containers/mobile/legacy environments for cross-domain issues.
• Produce detailed assessment reports with remediation recommendations.
• Participate in follow-up assessments and retesting cycles.

Skills

Cyber Operations

Cybersecurity Strategies

Cyber Threat Intelligence

Security Operations

Education

Bachelor’s degree in information technology, computer science, cybersecurity or a related field

Tools

Nmap

NESSUS

Metasploit

Burp Suite

CANVAS

Kismet

Job description

GDIT is seeking a Penetration Tester to support CBP Cyber Security Directorate, focusing on hands-on testing across networks, apps, and cloud, with industry-standard tools. The role emphasizes vulnerability discovery, reporting, and risk-based remediation in a high-stakes, national-security context.

You will work within a mission-critical team, leveraging offensive security practices, and contribute to zero-trust modernization, incident response, and ongoing risk assessment efforts.