Red Team Penetration Tester - Fredericksburg

Salary: $90,000 - 150,000 per year Requirements:

• At least five years of experience in software engineering applied to program development; modeling and simulation relevant to DoD or IT systems.
• Proficiency in both Linux and Windows operating systems.
• Comprehensive understanding of popular Penetration Testing tools, including Kali, Metasploit, NMAP, and Cobalt Strike.
• Expertise in executing Penetration Testing and Red Team operations.
• Development skills in creating tools/software for exploits, malware, command & control, reverse engineering, and bug bounties.
• Experience with programming languages such as Python, C, C#, C++, Go, Perl, and PowerShell.
• Background in web development and penetration testing for web applications.
• Familiarity with NSX, vCenter, vRealize Suite, and Horizon View (VDI).
• Knowledge of PAN-OS, FirePower, Nexus, IOS, and ASA.
• Experienced in ONTAP and SnapMirror management.
• Proficient in Active Directory and Entra ID (Azure AD), including identity management, SSO, MFA, and integration.
• Skills in automation using PowerShell, PowerAutomate, Logic Apps, and Graph API.
• Experience in a hybrid environment with Microsoft Entra ID and Microsoft 365.
• Familiarity with Palo Alto, Cisco, VMware, NetApp, and Microsoft products.
• Ability to manage identity and access within Microsoft Entra ID.
• Experience conducting Red Team operations in an MDE environment.
• Familiarity with AWS, Cloud Audit, Serverless, and Microservice Architecture.
• Knowledge of AWS services like EC2, S3, KMS, RDS, and their associated security best practices.
• Competence in web services penetration testing (RESTful and SOAP) and web authentication protocols (e.g., OAuth2, SAML, LDAP).
• Experience with PHP, ASP, SQL databases, Java, HTML, and No SQL.
• Hold at least one of the following certifications: Security+, CCNA Security, CySA+, GICSP, SSCP.
• Certification as a penetration tester with one of the following: OSCP, OSCE, OSEE, OSWP (Offensive Security certifications), or relevant SANS certifications.
• Graduate of OSD Sponsored Cyber Operation Academy Course (COAC) or participation in Capture the Flag events (DEFCON, Over-The-Wire, Hack the Box).
• Security research experience leading to a Common Vulnerabilities and Exposures (CVE).

• Debug and reverse engineer software systems.
• Analyze Windows Events, Linux syslogs, boot logs, and dmesg logs.
• Program and debug Web 2.0, Java, Perl, Ada, C++, and Tool Command Language scripts, including GUIs using Microsoft Visual Studio and Rational ClearCase.
• Recommend modifications to software systems to address known vulnerabilities.
• Operate and manage systems running HP-UX, UNIX, Solaris, Linux, and Windows.
• Identify security vulnerabilities in both compiled and human-readable source code, understanding real-time operating systems and network protocols.
• Implement NSA-approved encryption technologies and adhere to DISA Security Technical Implementation Guides (STIGs).
• Apply virtual hosting and server technologies within system architectures while utilizing deceptive technologies like honeypots.
• Participate in code reviews and conduct static source code analyses.
• Author recommendations for enhancing software and code design.
• Contribute to the development of a System Security Administrator and Operators Manual (SSAOM).

• Ada
• API
• AWS
• Active Directory
• Azure
• C#
• Cloud
• Cisco
• EC2
• Java
• LDAP
• Linux
• Microsoft 365
• Network
• Nexus
• PHP
• Perl
• PowerShell
• Python
• SAML
• SOAP
• SQL
• Security
• Serverless
• Unix
• VMware
• Visual Studio
• Web
• Windows
• iOS
• Office 365
• UX UI Design
• Support

More:

At SimVentions, regularly recognized as one of Virginias Best Places to Work, we are seeking a skilled Red Team Penetration Tester to join our committed team. This role involves performing penetration tests and offensive cybersecurity operations for the U.S. Government and Department of Defense systems. Our collaborative environment promotes synergy with Blue Team and cybersecurity experts to bolster our cyber defense strategies. The anticipated start date for this role is contingent upon the award of the contract in October 2026. We offer a comprehensive benefits package, a supportive team atmosphere, and an inclusive workplace culture.

last updated 39 week of 2026