Senior Penetration Tester (TS/SCI/Poly) - Ethical Hacker

General Dynamics Information Technology; Bethesda (MD); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Domestic travel 0-25%

Job summary

General Dynamics Information Technology is seeking an Ethical Hacker/Penetration Tester Sr Principal to lead internal penetration testing across servers, web apps, and databases.

You will manually exploit operating systems and web services, write final reports with risk and mitigation strategies, and coordinate with developers, admins, PMs, and government stakeholders. Domestic travel up to 25% may be required.

Qualifications

• 8+ years of related experience.
• TS/SCI with Polygraph security clearance.
• US citizenship required.
• Bachelor’s degree in computer engineering, CS, EE, or related field.
• Master’s degree may substitute for 3 years of experience.

Responsibilities

• Conduct internal penetration testing of servers, web applications, web services, and databases.
• Manually exploit operating systems and web services.
• Identify vulnerabilities and compliance gaps.
• Write final reports with risk, mitigation strategies, and references.
• Develop RoE, test plans, and SOPs.
• Coordinate with developers, system administrators, PMs, and senior government stakeholders.
• Provide security recommendations to stakeholders.
• Report vulnerabilities identified during security assessments.
• Travel domestically up to 25%.

Skills

Penetration testing

Vulnerability assessment

Security reporting

Stakeholder communication

NIST 800-53 knowledge

PKI knowledge

TCP/IP knowledge

Education

Bachelor’s degree in computer engineering, Computer Science, Electrical Engineering, Information systems, Information Technology, Cybersecurity, or related discipline

Master’s degree substitution for 3 years of experience

Tools

CEH Certification

CPT Certification

Job description

General Dynamics Information Technology is seeking an Ethical Hacker/Penetration Tester Sr Principal to lead internal penetration testing across servers, web apps, and databases.

You will manually exploit operating systems and web services, write final reports with risk and mitigation strategies, and coordinate with developers, admins, PMs, and government stakeholders. Domestic travel up to 25% may be required.