Senior Penetration Testing, Software Assurance and Vulnerability Assessment Engineer

LinTech Global, a Dexian company; Washington (District of Columbia); On-site; USD 125,000 - 150,000; Full time

Benefits offered by this job

Open Paid Time Off

11 Federal Holidays

Company-paid Life/AD&D

Health Insurance with Company Contrib.

401k with Company Match

Job summary

Dexian Government Solutions is seeking a Senior Penetration Testing, Software Assurance and Vulnerability Assessment Engineer to support DHS CIETS in the DC Metro area. The role requires identifying vulnerabilities, assessing security posture, and providing remediation guidance across classified and unclassified environments.

The candidate will conduct penetration testing, vulnerability assessments, and software assurance analyses, while coordinating with ISSOs, ISSMs, and system owners to

Qualifications

• At least 10 years of total experience with a minimum of 2 years in software assurance, penetration testing, vulnerability assessment and related areas.
• Certification requirements include CEH and CISSP, or demonstrable equivalent experience.

Responsibilities

• Conduct penetration testing of DHS I&A systems and environments.
• Evaluate system resistance to cyber-attacks and validate security controls.
• Perform vulnerability assessments and analyze scan results to identify weaknesses.
• Support RMF activities and Security Control Assessments (SCAs).
• Provide remediation recommendations and coordinate with system owners and engineers.

Skills

Penetration testing

Vulnerability assessment

Security testing

Software assurance

CEH certification

CISSP certification

Education

Bachelor's degree in Computer Science or related field

Tools

Nessus

Burp Suite

Metasploit

Job description

Position Overview

Dexian Government Solutions is recruiting for a Senior Penetration Testing, Software Assurance, and Vulnerability Assessment Engineer to support our proposal at the DHS CIETS in the DC Metro area. The engineer serves as DHS I&A's senior offensive security and technical assessment specialist, responsible for identifying vulnerabilities, assessing system security posture, validating security control effectiveness, conducting penetration testing activities, evaluating software assurance risks, and providing actionable remediation recommendations across classified and unclassified environments.

Job Duties

• Penetration testing
• Vulnerability assessments
• Security testing and evaluation
• Software assurance analysis
• Security control validation
• Technical risk identification
• Security architecture assessment
• Remediation planning
• Continuous monitoring support

The position functions as the Government's senior technical assessor, independently identifying weaknesses before adversaries do.

Core Responsibilities

• Conduct penetration testing of DHS I&A systems and environments.
• Evaluate system resistance to cyber-attacks.
• Assess network, application, operating system, and infrastructure security.
• Perform adversarial testing activities to identify exploitable weaknesses.
• Validate the effectiveness of implemented security controls.
• Document findings and recommend corrective actions.

Vulnerability Assessment

• Conduct comprehensive vulnerability assessments.
• Analyze vulnerability scan results.
• Identify security weaknesses and misconfigurations.
• Assess severity and operational impact of vulnerabilities.
• Validate remediation effectiveness.
• Provide technical recommendations to reduce risk.

Software Assurance Analysis

• Evaluate software security posture.
• Assess application security controls.
• Review software development and deployment risks.
• Identify coding and implementation weaknesses.
• Support secure software development practices.
• Analyze software assurance findings and recommend mitigation strategies.

Security Testing and Validation

• Perform security testing supporting RMF activities.
• Validate implementation of technical security controls.
• Support Security Control Assessments (SCAs).
• Evaluate effectiveness of security safeguards.
• Verify compliance with security requirements.
• Assist authorization teams in assessing residual risk.

Security Engineering Assessments

• Conduct technical security reviews of systems and architectures.
• Evaluate proposed technologies and security implementations.
• Identify engineering weaknesses affecting system security.
• Support architecture and design reviews.
• Recommend technical improvements.

Continuous Monitoring Support

• Support ongoing vulnerability management activities.
• Assess emerging risks and threat exposure.
• Review remediation progress.
• Monitor recurring findings and risk trends.
• Support continuous authorization activities.

Risk Analysis and Remediation

• Analyze risks associated with identified vulnerabilities.
• Recommend risk mitigation strategies.
• Evaluate compensating controls.
• Prioritize remediation activities.
• Brief Government leadership on technical findings and risk implications.

Stakeholder Coordination

• Coordinate with ISSOs and ISSMs regarding findings.
• Support Security Control Assessors during assessments.
• Work with system administrators and engineers to resolve vulnerabilities.
• Provide technical recommendations to system owners.
• Support Government cybersecurity leadership during audits and inspections.

Stakeholder Interaction

• ISSOs
• ISSMs
• Security Control Assessors
• Security Risk Management Engineers
• Cybersecurity Engineers
• System Administrators
• Application Development Teams
• Enterprise Architects
• System Owners
• Authorizing Officials

Required Qualifications

The Senior Penetration Testing, Software Assurance and Vulnerability Assessment Engineer must have at least 2 years of recent experience in each of the following technical areas: software assurance, penetration testing with a range of automated tools, vulnerability assessment, security patch management, secure cloud and hybrid engineering, and CDS, for a total of at least 10 years.

Certification Requirements: The engineer must possess certifications as a Certified Ethical Hacker (CEH) and CISSP, or comparable demonstrable experience.

Clearance Requirements: TS/SCI with CI Polygraph.

Benefits

Our robust benefits package includes Open Paid Time Off, 11 Federal Paid Holidays & 5 Paid Sick Days, Company-paid Life/AD&D, Company-paid Short Term and Long-Term Disability, Health Insurance with Company Contribution, 401k Plan with Company Match, Employee Recognition Program, opportunity for Employee Referral Bonus, opportunity for annual Performance Bonus and much more.

EEO Statement

Dexian Government Solutions is proud to be an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided based on qualifications, merit, and business need. All applicants will be considered for employment without attention to race, religion, color, national origin, ancestry, physical or mental disability, medical condition, pregnancy (including childbirth, lactation and related medical conditions), marital status, genetic information (including characteristics and testing), gender, sexual orientation, gender identity or expression, military and veteran status, or any other status protected under federal, state, or local law in the locations where we operate.

If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact Human Resources. The Company invites any applicant and/or employee to review the Company's written affirmative action plan.

Salary: $125,000 - $150,000 per year.

Job Posted by ApplicantPro