Senior Red Team Penetration Tester

Booz Allen Hamilton; Dahlgren (VA); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a seasoned penetration tester to safeguard DoD IT environments. You will plan, execute, and document security assessments across networks, apps, and endpoints while applying RMF artifacts and GPOs. Physical security testing is also part of the role.

The ideal candidate has 5+ years in security testing, strong knowledge of Linux/Windows, and proficiency with tools such as Kali, Metasploit, Nmap, and Cobalt Strike. A Top Secret clearance is required or imminent.

Qualifications

• 5+ years of experience in software engineering applied to DoD or IT systems.
• Experience in Penetration Testing (PENTEST), Red Team Operations, and exploit development or malware creation.
• Knowledge of Linux and Windows based systems; familiarity with common pentest tools.

Responsibilities

• Develop detailed test and assessment plans for onsite and remote security assessments.
• Perform penetration tests of networks, applications, web apps, servers, endpoints, wireless, and mobile technologies; conduct physical security testing.
• Use vulnerability scans, RMF artifacts, GPOs, and WSUS to verify security controls and reported configurations.
• Provide packet-level analysis using Wireshark and tcpdump to identify anomalous network behavior.
• Assist customers by documenting findings and providing actionable remediation guidance.

Skills

Penetration testing

Red Team operations

Exploit development

C2

Reverse engineering

Bug bounties

PHP

ASP

SQL databases

Java

HTML

NoSQL

Kali

Metasploit

Nmap

Cobalt Strike

Linux

Windows

RMF

Education

HS diploma or GED

IAT Level II per DoD 8570.01

Tools

Kali Linux

Metasploit

Nmap

Cobalt Strike

Job description

Booz Allen Hamilton is seeking a seasoned penetration tester to safeguard DoD IT environments. You will plan, execute, and document security assessments across networks, apps, and endpoints while applying RMF artifacts and GPOs. Physical security testing is also part of the role.

The ideal candidate has 5+ years in security testing, strong knowledge of Linux/Windows, and proficiency with tools such as Kali, Metasploit, Nmap, and Cobalt Strike. A Top Secret clearance is required or imminent.