Senior Pentest Operator: Offensive Security & Red Team

Dovel Technologies, Inc; Beltsville (MD); On-site; USD 113,000 - 188,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) Retirement Plan

Employee Assistance Program

Job summary

Dovel Technologies, Inc is seeking a Pentest Operator to lead and support offensive security engagements across internal and external networks, web apps, and AD environments. You will emulate adversaries, validate defenses, and deliver risk-based remediation guidance to clients in federal and commercial settings.

Responsibilities include developing test plans, executing assessments, and producing technical and executive reports.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field; additional relevant experience may be considered in lieu of degree.
• Minimum of five (5) years of hands-on experience in penetration testing, red team operations, adversary emulation, vulnerability assessment, or related offensive security work.
• Experience performing internal and external network penetration testing with recon, enumeration, exploitation, and documentation of attack paths.
• Experience conducting web application penetration testing using manual and automated techniques.
• Experience assessing Active Directory environments, Windows and Linux systems, and common enterprise network services.
• Experience using common penetration testing tools such as Burp Suite, Metasploit, Nmap, Nessus, Kali Linux, Wireshark, BloodHound, Impacket, Responder, Hashcat, John the Ripper, Cobalt Strike, Sliver.
• Ability to develop test plans, document Rules of Engagement, track assessment activities, and produce formal penetration test reports.
• Strong written and verbal communication skills to convey findings to technical and non-technical stakeholders.

Responsibilities

• Perform penetration testing across internal/external networks, web apps, and enterprise systems.
• Support HVA cybersecurity assessments by identifying exploitable vulnerabilities and determining risk to critical assets.
• Map networks, perform reconnaissance, validate vulnerabilities, exploit where appropriate, and document attack paths.
• Draft Rules of Engagement and test plans; maintain updated assessment procedures for stakeholder approval.
• Conduct external testing to simulate outside attacker access within scope.
• Conduct internal testing to evaluate risks from users and systems with different access levels, including AD attack paths.
• Support red team/adversary emulation with simulated threat behaviors and C2 activities.
• Perform web application testing covering OWASP Top 10 risks and related weaknesses.
• Produce clear, evidence-based reports and executive-level out-briefs to client stakeholders.
• Stay current on offensive security techniques and federal cybersecurity requirements.

Skills

Penetration testing

Red team

Adversary emulation

Web app testing

Active Directory

Kali Linux

Nessus

Clear communication

Report writing

Education

Bachelor’s degree in Cybersecurity/IT

Tools

Burp Suite

Metasploit

Nmap

Nessus

Kali Linux

Wireshark

BloodHound

Impacket

Responder

Hashcat

John the Ripper

Cobalt Strike

Sliver

Job description

Dovel Technologies, Inc is seeking a Pentest Operator to lead and support offensive security engagements across internal and external networks, web apps, and AD environments. You will emulate adversaries, validate defenses, and deliver risk-based remediation guidance to clients in federal and commercial settings.

Responsibilities include developing test plans, executing assessments, and producing technical and executive reports.