Red Team Penetration Tester — Protect Critical Systems

Booz Allen Hamilton; Virginia Beach (VA); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a seasoned penetration tester to safeguard national digital environments. You will craft and execute comprehensive test plans for on-site and remote security assessments, covering footprints from discovery to privilege escalation and beyond.

You will leverage vulnerability scans, RMF artifacts, and WSUS/GPO data to verify controls, plus perform packet-level analysis with Wireshark/tcpdump to identify malicious activity. A 25% travel expectation applies.

Qualifications

• 5+ years of experience in software engineering applied to program development or modeling and simulation for DoD/IT systems.
• Experience in Penetration Testing (PENTEST), Red Team operations, PHP/ASP/SQL/Java/HTML/NoSQL, exploits or malware.
• Knowledge of Linux and Windows-based systems.
• Familiar with common PENTEST tools such as Kali, Metasploit, NMAP, Cobalt Strike.
• Ability to travel up to 25% and obtain/maintain required security clearances.

Responsibilities

• Develop detailed test and assessment plans for on-site and remote security assessments.
• Perform vulnerability scans and analyze configuration data (GPOs, WSUS) to verify controls.
• Conduct packet-level analysis using Wireshark and tcpdump to detect malicious traffic.
• Carry out penetration tests of networks, apps, servers, endpoints, and wireless/mobile tech.
• Assist with physical security testing to test access controls.

Skills

Penetration testing

Red Team operations

Linux/Windows knowledge

Network analysis

Debug/reverse engineering

Education

HS diploma or GED

DoD 8570.01 IAT Level II Certification

Tools

Kali

Metasploit

NMAP

Cobalt Strike

Wireshark

tcpdump

Job description

Booz Allen Hamilton is seeking a seasoned penetration tester to safeguard national digital environments. You will craft and execute comprehensive test plans for on-site and remote security assessments, covering footprints from discovery to privilege escalation and beyond.

You will leverage vulnerability scans, RMF artifacts, and WSUS/GPO data to verify controls, plus perform packet-level analysis with Wireshark/tcpdump to identify malicious activity. A 25% travel expectation applies.