Senior Federal Penetration Tester — Onsite (DC/VA)

Society of Defense Financial Management; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

B&M Cyber is seeking an experienced Penetration Tester to support cybersecurity testing for Federal clients. You will plan and conduct hands-on penetration testing across infrastructure, applications, cloud, and identity environments, delivering actionable recommendations to improve security posture.

Candidates must obtain a security clearance and be willing to work onsite at Federal client locations in Washington, D.C. or Northern Virginia five days per week.

Qualifications

• Experience planning, executing, documenting, and presenting complex penetration testing engagements.
• OSCP, GPEN, GXPN, OSEP or equivalent hands-on certs preferred.
• Minimum five years of hands-on pentesting across networks, apps, cloud, and identity environments.

Responsibilities

• Identify and document vulnerabilities, misconfigurations, and compliance issues through thorough examination of infrastructures, systems, and controls.
• Develop and execute RoE, test plans, and SOPs aligned with client requirements.
• Plan, scope, conduct, and document testing across networks, web apps, APIs, cloud services, and identity technologies.
• Perform full testing lifecycle from scanning to exploitation and post-exploitation within RoE.
• Analyze findings, identify attack paths, and recommend remediation actions.
• Prepare technical reports and present results to stakeholders, including government clients.
• Safeguard sensitive information encountered during testing per client policies.
• Manage assignments, deadlines, and risks; coordinate with stakeholders.
• Contribute to continuous improvement of testing methodologies and tooling.

Skills

Penetration testing

Security testing methodology

Independent work

Education

Bachelor's degree in Cybersecurity

Tools

Burp Suite

Metasploit

Nmap

Nessus

BloodHound

Impacket

C2 frameworks

Job description

B&M Cyber is seeking an experienced Penetration Tester to support cybersecurity testing for Federal clients. You will plan and conduct hands-on penetration testing across infrastructure, applications, cloud, and identity environments, delivering actionable recommendations to improve security posture.

Candidates must obtain a security clearance and be willing to work onsite at Federal client locations in Washington, D.C. or Northern Virginia five days per week.