Senior Penetration Tester & Red Team Leader

Security 1st Consulting; Newport News (VA); On-site; USD 125,000 - 180,000; Full time

Job summary

Security 1st Consulting is seeking a Senior Penetration Tester and Red Team Lead to design and execute external, internal, and wireless testing across a live district network. You will manage testing across 50+ facilities, 40,000 devices, and two data centers, delivering actionable findings and remediation guidance.

The role requires OSCP, 5+ years of hands-on pentesting, and strong technical writing. You will coordinate with the client and ensure testing does not disrupt operations, while

Qualifications

• Active OSCP certification
• 5+ years of hands-on penetration testing across external, internal, and wireless environments
• Proficiency with Metasploit, Nmap, Burp Suite, Aircrack-ng, Wireshark
• Experience identifying privilege escalation paths and lateral movement
• Strong technical writing skills — findings reports must be clear, accurate, and actionable
• Ability to manage testing activities without disrupting production systems

Responsibilities

• Lead all external, internal, and wireless penetration testing activities within the approved scope.
• Develop and submit the written test plan, including scope confirmation, attack vector mapping, and communication protocols, before testing begins.
• Conduct external penetration testing from outside the network perimeter via the internet, mimicking an attacker with no credentials or prior network knowledge.
• Conduct internal penetration testing from inside the organization, testing internal systems for exploitable vulnerabilities including privilege escalation and lateral movement.
• Perform wireless penetration testing across four identified wireless networks, validating security mechanisms against unauthorized access.
• Communicate with third-party vendors to obtain authorization as required for scoped systems.
• Document all findings with CVSS severity ratings, technical detail, business impact analysis, and step-by-step remediation guidance.
• Coordinate testing timing with the client IT team to avoid disruption to classroom instruction — network-intensive testing is conducted after hours.
• Ensure no hardware or software is used that would interrupt network connectivity or production systems; disclose in advance any testing with potential network impact.

Skills

Penetration testing

Red Team Leadership

Technical Writing

Networking

Tools

Metasploit

Nmap

Burp Suite

Aircrack-ng

Wireshark

Job description

Security 1st Consulting is seeking a Senior Penetration Tester and Red Team Lead to design and execute external, internal, and wireless testing across a live district network. You will manage testing across 50+ facilities, 40,000 devices, and two data centers, delivering actionable findings and remediation guidance.

The role requires OSCP, 5+ years of hands-on pentesting, and strong technical writing. You will coordinate with the client and ensure testing does not disrupt operations, while