Penetration Tester - TS/SCI with Polygraph

General Dynamics Information Technology, Inc.; McLean (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

401K with company match

Health and wellness packages

Internal mobility team

Paid education and certifications

Paid vacation and holidays

Job summary

General Dynamics Information Technology, Inc. is seeking a Penetration Tester to join our Cyber Security team at the McLean, VA client site.

You will perform internal and external evaluations of networks, applications, databases, and cloud services, and articulate clear risk-based recommendations. Qualified candidates will have 8+ years of hands-on testing experience, a TS/SCI with Polygraph clearance, and demonstrable skills in writing comprehensive security reports and interacting with diverse

Qualifications

• Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or related discipline.
• 8+ years of experience in penetration testing or red-team/blue-team security assessments.
• Clearance: TS/SCI with Polygraph.
• Experience with NIST 800-53 and RMF.

Responsibilities

• Conduct internal and external penetration testing of networks, web apps, databases, and cloud services.
• Manually exploit and compromise systems, including privilege escalation and lateral movement.
• Analyze results from scanners and code analysis to identify vulnerabilities and misconfigurations.
• Write reports detailing findings, risk, mitigations, and references.
• Coordinate with developers, admins, PMs, and senior stakeholders to discuss findings.

Skills

Penetration testing

Security writing

RMF

NIST 800-53

Education

Bachelor's degree

Tools

AWS

Azure

Job description

Seize your opportunity to make a personal impact as a Penetration Tester supporting customer activities. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career.

At GDIT, people are our differentiator. As a Penetration Tester, you will help ensure today is safe and tomorrow is smarter. Our work depends on a Penetration Tester joining our highly skilled team to be a premier provider of cyber security services to the customer. We provide consummate cyber security risk management “as a service” platform across multiple fabrics and centers. We have responsibility to ensure operational IT capabilities provide the client with necessary timeliness, accuracy and security of information demanded from all our highly professional roles. Be the change, lead our change – join us!

HOW A PENETRATION TESTER WILL MAKE AN IMPACT

• Conduct internal and external penetration testing of networks, web applications, databases, and cloud services
• Manually exploit and compromise networks, web applications, databases, and cloud services to include privilege escalation and lateral movement
• Examine results of web/OS scanners, scans and static source code analysis
• Identify vulnerabilities, misconfigurations, and compliance issues
• Write final reports, defend all findings to include the risk or vulnerability, mitigation strategies, and references
• Ability to meet and coordinate with various audiences to include developers, system administrators, project managers, and senior government stakeholders
• Provide security recommendations for developers, system administrators, project managers, and senior government stakeholders
• Report vulnerabilities identified during security assessments
• Write penetration testing Rules of Engagements (RoE), Test Plans, and Standard Operating Procedures (SOP)
• Produce actionable, threat-based reports on security testing results
• Conduct security reviews, technical research, and provide reporting to increase security defense mechanisms

WHAT YOU’LL NEED TO SUCCEED:

• Education: Bachelor's Degree (Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline)
• Required Experience: 8+ yrs
• Clearance: TS/SCI with Polygraph
• Required Technical Skills:
• Experience with NIST 800-53 and Risk Management Framework
• Desired Certifications:
• CEH - Certified Ethical Hacker Certification, CPT - Certified Penetration Tester
• Desired Skills:
• Strong writing skills
• Experience with AWS and Azure Cloud Security
• Location: McLean, VA - On Customer Site

GDIT IS YOUR PLACE:

• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to helping you own your career
• Professional growth opportunities including paid education and certifications
• Cutting-edge technology you can learn from
• Rest and recharge with paid vacation and holidays

#WeAreGDIT

#JET

#VA_2026Alumni