Senior Penetration Tester - TS/SCI Eligible (Hybrid)

OneZero Solutions; Alexandria (VA); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health, dental, vision, and life保险

401(k) with company matching

Paid time off and holidays

Employee referral program

Educational assistance

Job summary

OneZero Solutions in Alexandria, VA seeks a Penetration Tester Journeyman to join our hybrid team supporting DoD cyber missions. The role requires an active Top Secret with SCI eligibility and hands-on experience in adversary simulation, infrastructure, and penetration testing.

You will deploy C2 frameworks (Cobalt Strike, Havoc, Mythic, Sliver), conduct phishing and social engineering, map networks, test AD paths with BloodHound, and prepare detailed reports with findings and recommendations.

Qualifications

• BA/BS or equivalent years of relevant experience.
• IAT II: GPEN, RTAC, or equivalent.
• IAT III: CISSP, CASP+ CE, CISA, CCNP Security, GCED or GCIH.
• Experience with phishing campaigns or social engineering.
• Hands-on experience with red team tasks and pen testing.

Responsibilities

• Deploy, configure, and operate C2 frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.
• Apply TTPs for initial access, lateral movement, privilege escalation, persistence and data exfiltration.
• Leverage offensive security tools to meet engagement objectives and conduct phishing assessments.
• Monitor, manage, and maintain cloud and on-premise infrastructure used during assessments.
• Network mapping, enumeration, and assess web/mobile apps; perform database scans.
• Assess Active Directory attack paths using BloodHound and develop formal reports.

Skills

PowerShell

C

C++

Python

Red team

Penetration testing

Phishing campaigns

Social engineering

EDR/AV bypass

C2 frameworks

Education

BA/BS or equivalent years of relevant experience

IAT II: GPEN, RTAC, or equivalent

IAT III: CISSP, CASP+ CE, CISA, CCNP Security, GCED, GCIH

Tools

Cobalt Strike

Sliver

Havoc

Mythic

BloodHound

Job description

OneZero Solutions in Alexandria, VA seeks a Penetration Tester Journeyman to join our hybrid team supporting DoD cyber missions. The role requires an active Top Secret with SCI eligibility and hands-on experience in adversary simulation, infrastructure, and penetration testing.

You will deploy C2 frameworks (Cobalt Strike, Havoc, Mythic, Sliver), conduct phishing and social engineering, map networks, test AD paths with BloodHound, and prepare detailed reports with findings and recommendations.