I'm looking for a Cyber Penetration Tester role with a focus on security assessments and vulnerabilities. Ideally in Arlington, VA, with at least 5 years of experience, and a relevant security clearance. Additionally, I would prefer companies that focus on government and defense sectors.

Got it! I've searched for Cyber Penetration Tester roles in Arlington, VA, requiring at least 5 years of experience and relevant security clearance, ideally in the government and defense sectors. I found 27 positions that match your criteria. You can take a closer look at the options now.

Cyber Penetration Tester

Arlington, VA

5 years + Experience

Secret

Government/Defense

Can you help me to analyze the job description and company culture?

Sure. Here's the analysis:

Job Analysis:

The Cyber Penetration Tester - Subject Matter Expert role at Peraton is fundamentally about ensuring the security posture of client systems through thorough penetration testing and vulnerability assessments. The primary responsibility is to lead detailed penetration tests, identify security flaws, and provide actionable remediation strategies aligned with NIST 800-53 mandates. This involves considerable technical acumen and leadership capability since the candidate will guide and train both junior and senior testers when addressing complex security issues. The role requires not only the execution of tests using established tools like Kali Linux and Metasploit but also creative problem-solving to navigate the unique security challenges faced by the Department of State. Success in this position will be measured by the candidate's ability to maintain the integrity of Red Cell infrastructure, generate clear and comprehensive reports, and effectively communicate findings to technical and non-technical stakeholders. An ideal candidate must balance deep technical expertise with strong communication skills, given the expectation to work collaboratively with system owners and engineers to enhance overall security frameworks.

Company Analysis:

Peraton positions itself as an innovative force in national security, emphasizing the ability to tackle complex challenges in an ever-evolving landscape. As a transformative enterprise IT provider, Peraton seeks individuals who not only possess robust technical skills but also foster an entrepreneurial spirit. Their mission to offer bold solutions to critical security issues suggests a fast-paced, dynamic work culture that values outside-the-box thinking over adherence to tradition. This culture may require new employees to be adaptable, proactive, and willing to take initiative in driving projects forward. The Cyber Penetration Tester role resides within a structured team dedicated to cyber security, where contributions will directly impact national security efforts. Success in this role contributes to the company's overarching goal of safeguarding clients against traditional and non-traditional threats, illustrating how individual efforts can resonate within larger organizational objectives. Thus, candidates must align their personal drive with Peraton's mission-critical ethos to thrive in this environment.

Mock up some interview questions based on the job description.

Absolutely. Here are some mock interview questions that could come up:

Can you describe a recent penetration test you led, discussing your approach and the outcome?
Tell me about a challenge you faced while conducting a security assessment and how you overcame it.
Describe a time when you had to communicate complex security findings to a non-technical audience. How did you ensure they understood?
What motivates you to pursue a role in cyber security, and why are you interested in this position at Peraton?
How do you stay updated on the latest security threats and vulnerabilities?
What assessment methodologies have you utilized in your past work, and which do you feel is the most effective?
Imagine you identify a critical vulnerability during a penetration test. How would you prioritize the remediation efforts with the client stakeholders?
What would you do if your penetration testing results were disputed by the system owners?
In your opinion, what is the most significant challenge facing penetration testers in the current cyber landscape?
Why do you believe collaborating with teams outside of your own is essential in a role like this?
How would your previous experiences inform your approach to this role at Peraton?
Could you explain how you typically develop or modify tools to facilitate penetration testing?
What strategies do you use to ensure that your findings remain actionable and relevant to client security needs?

Job Details

Overview Company

Cyber Penetration Tester SME

$104k/y-$166k/y

Peraton

11 days ago

Highlight

OnsiteFull-time5+ yearsSenior

Summary

Peraton is seeking a Cyber Penetration Tester - Subject Matter Expert to join their team in Arlington, VA. The role involves providing leading cyber and technology security experience to enable innovative, effective, and secure business processes for the Department of State Diplomatic Security Cyber Mission program.

About the Role

In this role, you will support the Department of State Red Cell Team by performing and leading penetration tests to assess the security of customer systems. You will identify vulnerabilities, develop recommended remediations to satisfy mandated NIST 800-53 security controls, report and demonstrate findings to system owners and engineers, maintain Red Cell infrastructure, and develop or modify tools to automate discovery or exploitation.

About You

Required:

Associate's degree and 7 years of experience or Bachelor's Degree and 5 years of experience. In lieu of a degree, 4 years of additional experience may be considered.
Minimum of 5 years experience working in and with penetration testing.
Possess one of the following certifications, OR be able to obtain before start date: CASP+ CE, CCNA Cyber Ops, CCNA-Security, CCNP Security, CEH, CFR, CISA, CISSP (or Associate), Cloud+, CySA+, GCED, GCIA, GCIH, GICSP, SCYBER, VCA DCV, PPDA, Agile IC, or SNOW App Dev.
Demonstrated experience with Kali Linux.
Demonstrated penetration testing tools experience with Nmap, Burp Suite, Metasploit, etc.
Demonstrated ability in evaluating vulnerabilities, performing root cause analysis, and reporting findings utilizing assessment methodologies such as NIST SP 800-115, Penetration Testing Execution Standard (PTES), Information Systems Security Assessment Framework (ISSAF), OWASP Web Security Testing Guide (WTG), etc.
Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers.
U.S. citizenship required.
Possess an active Secret security clearance.
Ability to obtain a final Top Secret/SCI security clearance.

Preferred:

Possess an Active Top Secret or TS/SCI clearance.
One of the following certifications or an alternate, verifiable certification demonstrating IT security competence: CompTIA CASP+, ISC2 Certified Information Security Professional (CISSP), ISC2 Certified Cloud Security Professional (CCSP), ISC2 Information Systems Security Engineering Professional (ISSEP).
One of the following certifications or an alternate, verifiable certification demonstrating practical penetration testing competence: Offensive Security Certified Professional (OSCP), Hack the Box Certified Penetration Testing Specialist (CPTS), TCM Security Practical Network Penetration Tester (PNPT), or GIAC Exploit Researcher and Advanced Penetration Tester (GXPN).
Zero Point Security Red Team Ops II.
Advanced understanding of the following: NIST Risk Management Framework (RMF) and the Assessment and Authorization (A&A) process.
Security principles such as CIA, IAAAA, access control models, risk management, etc.
Networking principles and technologies such as IP routing, TCP/UDP, VPNs, firewalls, NAT, etc.
Common network protocols such as SSH, FTP, SMTP, SMB, HTTP, etc.
Operating system principles such as process management, device management, user management, file systems, etc.
Data processing principles such as encoding, hashing, encryption, etc.
Scripting and programming languages such as Bash, Python, PowerShell, JavaScript, etc.
Common application vulnerabilities and exploits such as outdated components, permissions misconfigurations, lack of input validation, logging/monitoring failures, etc.
Common web application vulnerabilities and exploits such as XSS, SQLi, LFI, file uploads, broken authentication mechanisms, etc.
Active Directory (AD) enumeration and attacks such as kerberoasting, AS-REP roasting, abusing misconfigured privileges, crafting golden tickets, etc.
Public Key Infrastructure (PKI) and navigating IT environments implementing multifactor authentication.
Cloud technologies and platforms such as Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), etc.

Peraton

Do the can't be done.

At Peraton, we're at the forefront of delivering the next big thing every day. We're the partner of choice to help solve some of the world's most daunting challenges, delivering bold, new solutions to keep people around the world safer and more secure.

How do we do it? By thinking differently. We're not mired in the past. We look at all problems with fresh eyes. We look past the obvious to bring the best talent, tech, and ideas together to completely transform how things get done. So bring your unique ideas, your entrepreneurial spirit, and your drive to succeed and get ready to be part of something bigger. Get ready to do the can't be done.

Recruitment fraud is a growing trend where fraudsters have been known to attempt to use our name to trick job seekers with fake employment opportunities. This type of scam is typically carried out through fake job postings, fake websites, or email accounts claiming to be from Peraton. The intent of recruitment fraud is to gain access to your personal information, such as your banking information, credit card number, or social security number.

Please be aware that our careers site can be found at careers.peraton.com and our corporate site can be found at peraton.com.

To learn more about Recruitment fraud and what to expect and not to expect from a Peraton recruiter, please visit: https://careers.peraton.com/recruitment-fraud/

Arlington, VA