Penetration Tester, Senior (TS/SCI Clearance) with Security Clearance

Praescient Analytics; Arlington (VA); Vor Ort; USD 110.000 - 160.000; Vollzeit

Benefits dieser Stelle

Healthcare

401(k) with company match

3 weeks PTO

Travel incentives

Training allowance

Zusammenfassung

Praescient Analytics in Arlington, VA, seeks a Penetration Tester to advance the DoW Chief Digital and Artificial Intelligence Office’s War Data Platform. You will conduct multi-domain security assessments, develop actionable findings, and collaborate with engineering teams to strengthen defenses.

The role requires active TS/SCI clearance and 8+ years in offensive security, with proficiency in web/app security, cloud, networks, and scripting. A range of DoD-aligned certifications is preferred.

Qualifikationen

• Active TS/SCI clearance required.
• 8+ years of hands-on offensive security/penetration testing experience.
• Must possess at least one of the listed certifications (see qualifications).

Aufgaben

• Perform network, web application, and social engineering penetration tests using manual and automated methods.
• Evaluate risks and deliver detailed reports with exploit paths and mission impact.
• Partner with network, software, and AI teams to implement remediation plans and support incident response.
• Contribute to evolving internal testing methodologies and tools.

Kenntnisse

OWASP Top 10

Cloud security

Network protocols

Scripting (Python/PowerShell/Bash)

Jobbeschreibung

Position Overview: Praescient Analytics is seeking a highly motivated Penetration Tester to join our cybersecurity team in Arlington, VA, supporting the Department of War (DoW) Chief Digital and Artificial Intelligence Office’s (CDAO) War Data Platform (WDP)—formerly known as Advana. The WDP is an enterprise-wide, multi-domain data, analytics, and Artificial Intelligence (AI) platform providing civilian and military leaders with unprecedented access to secure enterprise data. As a Penetration Tester on this program, you will play a critical role in sustaining and evolving the WDP as the Department’s secure, standardized enterprise data integration layer. You will conduct comprehensive penetration tests across applications, networks, and hybrid-cloud systems hosting hundreds of curated analytics tools, actively identifying and exploiting vulnerabilities to validate and strengthen the platform’s security posture against advanced threats.

Key Responsibilities

• Comprehensive Security Testing: Perform various types of penetration tests, including network, web application, and social engineering assessments. Use a combination of advanced manual techniques and automated tools to discover and safely exploit vulnerabilities.
• Risk Assessment & Reporting: Evaluate overall system risk based on testing findings; develop detailed, actionable technical reports mapping out exploitation paths and their potential mission impact.
• Remediation & Collaboration: Partner with network engineering, software development, and AI engineering teams to build, track, and execute robust remediation plans; support incident response activities with deep technical insights when necessary.
• Methodology Evolution: Participate in the continuous development, refinement, and maintenance of internal penetration testing methodologies, custom testing tools, and baseline vulnerability assessment standards.
• Threat Intelligence Integration: Support the organization's broader threat intelligence ecosystem by actively sharing insights, novel attack chains, and defensive gaps discovered during offensive assessments.
• Continuous Research: Stay current with emerging threat actors, zero-day vulnerabilities, and defensive bypass techniques to continuously upgrade testing capabilities.

Qualifications & Requirements

• Clearance: Active TS/SCI security clearance is strictly required.
• Experience: Minimum of 8 years of hands‑on experience in offensive security, ethical hacking, vulnerability research, or penetration testing.
• Technical Depth: Deep familiarity with web application security frameworks (OWASP Top 10), cloud infrastructure security, network routing/protocols, and common scripting languages (e.g., Python, PowerShell, Bash) for tool customization.
• Required Certifications (Must possess at least ONE of the following):
  • CompTIA Cloud+
  • GIAC Certified Enterprise Defender (GCED)
  • GIAC Certified Incident Handler (GCIH)
  • GIAC Industrial Cyber Security Professional (GICSP)
  • GIAC Security Essentials (GSEC)
  • CompTIA PenTest+
  • CompTIA Security+
• Preferred Certifications:
  • Certified Computer Examiner (CCE) or CyberSec First Responder (CFR)
  • Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM)
  • Certified Information Systems Security Officer (CISSO)
  • Certified Penetration Testing Engineer (CPTE)
  • CompTIA CyberSecurity Analyst (CySA+)
  • Federal IT Security Professional-Auditor (FITSP-A)
  • GIAC Cloud Security Automation (GCSA)
  • GIAC Penetration Tester (GPEN)
  • GIAC Systems and Network Auditor (GSNA)

What You Can Expect From Us

• Real opportunity for career growth in an environment where your achievements will be celebrated
• Constant collaboration with numerous teams to ensure client success
• A team that respects and embraces your ideas and expertise
• Coworkers that are motivated by pursuing excellence, rather than the prospect of personal gain
• A workplace dedicated to supporting and bettering public safety and government agencies

Benefits

• Very competitive salary based on qualifications and experience
• Comprehensive, Company paid healthcare for you (We pay your premiums and deductibles)
• 401(k) with company match
• Travel & performance incentives
• 3 weeks paid time off (plus Federal Holidays)
• $5K annual training allowance

The projected compensation range for this position is $110,000.00 to $160,000.00 (annualized USD).

Praescient Analytics is a Certified Woman-Owned Small Business (WOSB) with over a decade of expertise in advanced analytics, engineering, and DevOps, specializing in transforming complex data into actionable intelligence for informed decision-making. Since 2011, we have supported over 40 organizations across diverse domains, including military intelligence operations, financial and fraud investigations, and insider threat detection. Our team of experts—skilled in cloud computing, artificial intelligence, machine learning, data science, DevOps, and engineering—brings deep experience in solving complex challenges. With a proven track record in federal contracting, we deliver tailored, high-impact solutions designed to enhance operational efficiency, ensure mission success, and address the evolving needs of our clients. Praescient’s innovative and adaptive approach makes us a trusted partner in delivering data‑driven insights and technological excellence for critical missions. Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

US Citizenship Required