Senior Penetration Tester - Red Team & AppSec Expert

PlanIT Group, LLC; Reston (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

PlanIT Group, LLC is seeking a seasoned security testing specialist in Reston, VA to perform web, API, and network assessments. You will utilize Burp Suite Pro and DAST tools, conduct red team operations, and collaborate with CSOC and engineering to evaluate monitoring controls.

The role requires at least eight years of experience, a related degree, and the ability to obtain client clearance. Strong scripting skills (Python/PowerShell) and knowledge of ASVS and MITRE ATT&CK are preferred.

Qualifications

• Minimum of eight (8) years relevant experience.
• Degree required; if degree not in applicable field, four additional years of related experience.

Responsibilities

• Conduct web application, API, and network testing.
• Perform red team engagements from planning to execution.
• Lead phishing campaigns to test lateral movement capabilities.
• Coordinate with CSOC and engineering teams for purple team exercises.
• Document vulnerabilities and attack paths with technical writing.

Skills

Web app testing

API testing

Network testing

Burp Suite Pro

DAST tools

AI in security

Kali Linux

Metasploit Pro

Cobalt Strike

Red Team planning

Phishing simulations

Purple Team engagements

Python

PowerShell

PCI-DSS testing

OWASP ASVS

MITRE ATT&CK framework

Security certifications

Education

Bachelor's degree in a related field

Related experience in lieu of degree (4 extra years)

Tools

Burp Suite Pro

Metasploit Pro

Cobalt Strike

Kali Linux tools

Job description

PlanIT Group, LLC is seeking a seasoned security testing specialist in Reston, VA to perform web, API, and network assessments. You will utilize Burp Suite Pro and DAST tools, conduct red team operations, and collaborate with CSOC and engineering to evaluate monitoring controls.

The role requires at least eight years of experience, a related degree, and the ability to obtain client clearance. Strong scripting skills (Python/PowerShell) and knowledge of ASVS and MITRE ATT&CK are preferred.