Senior Pen Testing & Assessments Lead

CACI International Inc.; United States; Remote; USD 90,000 - 190,000; Full time

Job summary

CACI International Inc. is seeking a Senior Penetration Tester and Assessments Lead to plan and lead controlled technical assessments of customer networks, applications, cloud workloads, identity systems, and externally exposed assets.

This role is the senior engagement lead: it owns assessment scoping, technical planning, day-to-day execution, evidence quality, reporting, and customer out-brief support for assigned engagements.

Qualifications

• U.S. citizenship is required.
• Eligibility for a Public Trust fitness determination (High Risk).
• Five+ years of hands-on penetration-testing or offensive-security experience, incl. leadership.
• Scope, plan, and report enterprise tests across networks, web apps, AD, Linux, and cloud.
• Experience with common assessment tools: Nmap, Nessus, Burp Suite, OWASP ZAP, Metasploit, BloodHound, PowerView, Impacket, Certipy, Wireshark.
• Strong manual-testing skills beyond scanners; evidence preservation and safe PoC creation.
• recognized hands-on certifications such as OSCP, OSEP/OSCE, OSWE, GPEN, GXPN, GWAPT, PNPT, CPTS.

Responsibilities

• Lead penetration-testing engagements from scoping to remediation clarification.
• Translate objectives into an explicit assessment plan with boundaries.
• Mentor junior testers; stay hands-on with complex paths in networks, cloud, and AD.
• Validate vulnerabilities with safe manual testing and controlled exploits.
• Review evidence, prioritize remediation using CVSS and threat context.
• Ensure clear, actionable assessment reports and perform quality reviews.
• Lead customer discussions and support remediation validation.

Skills

Network segmentation testing

Web/API testing

Active Directory/AD CS

Linux testing

AWS/Azure testing

Manual exploit skills

Threat context analysis

Report writing

Education

OSCP

OSEP/OSCE

OSWE

GPEN

GXPN

Tools

Nmap

Tenable/Nessus

Burp Suite Pro

OWASP ZAP

Metasploit

BloodHound

PowerView

Impacket

Certipy/Certify

Wireshark

Job description

CACI International Inc. is seeking a Senior Penetration Tester and Assessments Lead to plan and lead controlled technical assessments of customer networks, applications, cloud workloads, identity systems, and externally exposed assets.

This role is the senior engagement lead: it owns assessment scoping, technical planning, day-to-day execution, evidence quality, reporting, and customer out-brief support for assigned engagements.