Senior Penetration Tester

GovCIO is currently hiring for a Senior Pentration Tester with an active TS/SCI clearance to support DHS onsite in Washington, DC.ResponsibilitiesThe Senior Penetration Tester serves as Key Personnel responsible for leading advanced penetration testing and vulnerability assessment activities within a TS/SCI environment. This role ensures mission‑critical security assurance across enterprise systems, applications, and cloud infrastructures by applying deep technical expertise, zero‑trust principles, and attacker‑focused methodologies. The Senior Penetration Tester guides technical direction, ensures rigorous execution, and provides authoritative recommendations to strengthen security posture across sensitive environments.Lead, plan, and oversee penetration testing operations for systems, networks, cloud resources, and web‑based applications in a TS/SCI environmentExecute comprehensive vulnerability assessments and software assurance evaluations; authoritatively document findings and drive remediation strategiesConduct deep technical analysis of vulnerabilities including buffer overflows, SQL injection, CSRF, XSS, race conditions (TOCTOU), XXE, encryption weaknesses, authentication bypass, and similar issuesAssess and advise on security considerations during software acceptance activities, including criteria definition, risk acceptance evaluation, documentation review, and independent validation approachesApply advanced security defense functions (encryption, access control, identity management) to reduce exploitation risks, including those related to supply chain considerationsProvide threat intelligence insights and vulnerability research aligned with frameworks such as NIST 800‑53 and MITRE ATT&CK to inform cloud security architecture decisionsDevelop new or enhanced penetration testing methodologies to identify emerging vulnerabilities and expand organizational capabilityServe as a senior technical advisor and mentor to penetration testing staff; ensure consistency, quality, and rigor in testing executionRepresent the penetration testing function in discussions with leadership, engineering teams, and mission stakeholders as required for Key Personnel rolesQualificationsBachelor's with 12+ years of penetration testing experience (or commensurate experience)Minimum of 8 years of experience supporting enterprise security architectures and cloud platforms (AWS, Azure, Google Cloud)Proven, extensive experience as a Penetration Tester in complex or classified environmentsAdvanced knowledge of penetration testing methodologies, offensive security techniques, and industry toolsExperience with AWS, Azure, RHEL, Linux, and TenableHands-on experience with tools including Kali Linux, Burp Suite Pro, and MetasploitStrong analytical and problem‑solving skills with an ability to think like an attackerExcellent communication skills to deliver clear, actionable findings to both technical and executive stakeholdersPreferred certifications: CEH, OSCP, or equivalent offensive security certificationsClearance Required: Active TS/SCI clearancePosted Salary RangeUSD $124,540.00 - USD $180,000.00 /Yr.