Penetration Tester - TS/SCI with Polygraph

GD Information Technology, Inc.; McLean (VA); On-site; USD 168,000 - 227,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health and wellness

Paid education and certifications

Career growth opportunities

Job summary

General Dynamics Information Technology, Inc. is seeking a Penetration Tester in McLean, VA to join a premier cybersecurity services team. You will conduct internal and external testing across networks, web apps, databases, and cloud services, manually exploit vulnerabilities, and deliver detailed risk-based reports.

A TS/SCI with Polygraph clearance is required for this role. The ideal candidate has 8+ years of related experience, a Bachelor's degree in a relevant field, and familiarity with

Qualifications

• Bachelor's degree in a related discipline.
• 8+ years of related experience.
• TS/SCI with Polygraph clearance required.
• Experience with NIST 800-53 and RMF.

Responsibilities

• Conduct internal and external penetration testing of networks, web apps, databases, and cloud services.
• Manually exploit and compromise networks, web apps, databases, and cloud services, including privilege escalation and lateral movement.
• Examine results of web/OS scanners, scans and static source code analysis.
• Identify vulnerabilities, misconfigurations, and compliance issues.
• Write reports defending findings with mitigation strategies and references.
• Produce actionable threat-based reports on security testing results.

Skills

Cloud Security

Cybersecurity Risk Management

Information Security

Education

Bachelor's Degree (Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline)

Job description

Type of Requisition

Regular Clearance Level Must Currently Possess: Top Secret SCI + Polygraph Clearance Level Must Be Able to Obtain: None Public Trust/Other Required: None

Job Family

Cyber and IT Risk Management

Job Qualifications

• Skills: Cloud Security, Cybersecurity Risk Management, Information Security
• Certifications: None
• Experience: 8 + years of related experience
• US Citizenship Required: Yes

Job Description

Seize your opportunity to make a personal impact as a Penetration Tester supporting customer activities. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career. At GDIT, people are our differentiator. As a Penetration Tester, you will help ensure today is safe and tomorrow is smarter. Our work depends on a Penetration Tester joining our highly skilled team to be a premier provider of cyber security services to the customer. We provide consummate cyber security risk management “as a service” platform across multiple fabrics and centers. We have responsibility to ensure operational IT capabilities provide the client with necessary timeliness, accuracy and security of information demanded from all our highly professional roles. Be the change, lead our change – join us!

HOW A PENETRATION TESTER WILL MAKE AN IMPACT

• Conduct internal and external penetration testing of networks, web applications, databases, and cloud services
• Manually exploit and compromise networks, web applications, databases, and cloud services to include privilege escalation and lateral movement
• Examine results of web/OS scanners, scans and static source code analysis
• Identify vulnerabilities, misconfigurations, and compliance issues
• Write final reports, defend all findings to include the risk or vulnerability, mitigation strategies, and references
• Ability to meet and coordinate with various audiences to include developers, system administrators, project managers, and senior government stakeholders
• Provide security recommendations for developers, system administrators, project managers, and senior government stakeholders
• Report vulnerabilities identified during security assessments
• Write penetration testing Rules of Engagements (RoE), Test Plans, and Standard Operating Procedures (SOP)
• Produce actionable, threat-based reports on security testing results
• Conduct security reviews, technical research, and provide reporting to increase security defense mechanisms

WHAT YOU’LL NEED TO SUCCEED

• Education: Bachelor's Degree (Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline)
• Required Experience: 8+ yrs
• Clearance: TS/SCI with Polygraph Required
• Technical Skills: Experience with NIST 800-53 and Risk Management Framework
• Desired Certifications: CEH - Certified Ethical Hacker Certification, CPT - Certified Penetration Tester
• Desired Skills: Strong writing skills
• Experience with AWS and Azure Cloud Security
• Location: McLean, VA - On Customer Site

GDIT IS YOUR PLACE

• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to helping you own your career
• Professional growth opportunities including paid education and certifications
• Cutting-edge technology you can learn from
• Rest and recharge with paid vacation and holidays
• #OpportunityOwned #GDITCareers #WeAreGDIT #JET #VA_2026Alumni

The likely salary range for this position is $168,141 - $227,485

Scheduled Weekly Hours: 40

Travel Required: Less than 10%

Telecommuting Options: Onsite

Work Location: USA VA McLean

Additional Work Locations:

Total Rewards at GDIT

• Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match.
• To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available.
• We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

About Our Work

We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development. Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc. Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Opportunity Owned From working with technologies like AI, cyber and cloud to careers in intelligence and health, we offer endless opportunities to apply your expertise to create a safer, smarter world. For more information about GDIT's Privacy Policy, click here: Privacy Policy | GDIT