Senior Penetration Tester & Cybersecurity Lead

SAIC; Austin (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

SAIC is seeking a Penetration Tester to join our offensive security practice, supporting a major state & local government customer. The role blends hands-on testing with cybersecurity leadership, spanning web, network, and mobile assessments, with opportunities to influence enterprise cyber architecture and cloud security.

You will deliver high-quality tests, manage engagements end-to-end, and communicate findings to technical teams and executives, including CISOs.

Qualifications

• Hands-on penetration testing across web, network, and mobile apps.
• Experience with NIST standards and enterprise cyber architecture.
• US Citizenship with CJIS clearance or the ability to obtain it.
• Proficiency in malware reverse engineering and enterprise cyber architecture.

Responsibilities

• Deliver high-quality penetration tests across client environments using black/white box, web app, or mobile methods.
• Independently manage engagements from scoping through reporting; ensure quality.
• Produce clear, actionable remediation guidance for technical teams and executives.
• Support mobile app security assessments (iOS/Android) using OWASP MASVS/MSTG.
• Contribute to cybersecurity strategy and cloud security practices.

Skills

Penetration testing

Web app testing

Mobile security testing

Cloud security

Cybersecurity reporting

NIST framework

Education

Bachelor's degree

PhD

Juris Doctorate (JD)

Tools

OWASP MASVS/MSTG

CJIS background knowledge

Forensics basics

Security reporting tooling

Job description

SAIC is seeking a Penetration Tester to join our offensive security practice, supporting a major state & local government customer. The role blends hands-on testing with cybersecurity leadership, spanning web, network, and mobile assessments, with opportunities to influence enterprise cyber architecture and cloud security.

You will deliver high-quality tests, manage engagements end-to-end, and communicate findings to technical teams and executives, including CISOs.