Associate Penetration Tester

Readiness Delivered . Kratos Defense & Security Solutions develops and fields transformative, affordable technology, platforms, and systems for United States National Security related customers, allies, and commercial enterprises. We proactively build trusted relationships with our peers, partners and customers, and take ownership for our actions-always striving to do the right thing. As an Associate Penetration Tester for Kratos' Commercial Cybersecurity Services division, working in a remote setting, you will play a key role in supporting offensive security assessments for a wide range of customer environments, including cloud platforms, networks, and emerging technologies. This entry-level position is ideal for individuals eager to apply ethical hacking techniques, emulate adversaries, and contribute to high?impact cybersecurity engagements. Working closely with a collaborative and learning?focused team, the Associate Penetration Tester will help identify vulnerabilities, develop clear and actionable remediation guidance, and support continuous improvement through research, automation, and tool development. This role provides an excellent opportunity to grow within offensive security while making meaningful contributions to customer security posture.

• Perform penetration testing engagements to simulate cyberattacks on customer computer systems, cloud solutions, and scoped networks. Generate deliverables, confirm scope, and execute with minimal oversight.
• Promote an inclusive, learning-focused team by sharing knowledge, promoting best practices, and collaborating to reach consensus on our approach to tactical issues. Work with the team to devise novel tests and scenarios for various penetration tests of emerging technologies.
• Consistently produce high quality, client ready deliverables.
• Develop and implement automation solutions, new tools, or processes to eliminate wasted effort and allow our team to focus on the important issues that require finesse and expertise.
• Research cybersecurity incidents, threats and vulnerabilities to keep up to date.
• Adhere to projects/tasks, scheduling, and quality control by monitoring penetration test execution. Reviews reporting to ensure it thoroughly breaks down and explains all weaknesses and vulnerabilities, their attack vectors and remediation steps in a clear and concise manner.
• Create proofs of concept, documentation, and evidence can be easily followed by customer points of contact. Provide recommendations for new technologies and system designs according to test results.

• One or more of the following R311 Certifications : CCNP Security, CASP+ CE, CISSP, CSSLP, CISSP-ISSEP, GPEN, GCED, CEH, CCNA Cyber Ops, CHFI, GCFA, CompTIA PenTest+, OSCP, OSWE, OSEP, OSWA, eCPPT, eWPT, eWPTX, HTB CPTS, Burp Suite Certified Practitioner.

Preferred Skills/Experience

• Experience and knowledge of general network testing skills and web application testing, including Open Source Intelligence Gathering, Cloud Configuration Testing, Network Testing & Exploitation, Web Application Exploitation, and Web API Testing.
• Functional knowledge or experience of one or more types of specialized testing, to include: Mobile Applications; Desktop Applications (Mac, Linux, or Windows); Red Team Engagements; Physical Penetration Testing.
• Understanding or experience with the FedRAMP framework and requirements for penetration testing.
• Knowledge of commonly used penetration testing tools and some ability to write scripts or develop rudimentary new tools as needed.
• Qualified candidates should be prepared to use and test new technologies with little notice through effective research and study strategies.
• Comfortable mentoring others on tools, concepts, and methods for conducting penetration testing.
• Prior experience in cybersecurity consulting and/or assessing government systems.
• Close proximity to the Washington D.C. area and willingness to travel on-site.
• Hold an active Secret or Top Secret clearance or willingness to apply for a clearance.

#LI-Remote

The grade-based pay range for this job is listed below. Individual salaries within that range are determined through a wide variety of factors including but not limited to education, experience, knowledge, and skills.

Competitive salary based on experience and education

As one of the first authorized Third-Party Assessment Organizations (3PAO) for FedRAMP, GovRAMP, and CMMC, Kratos' compliance services have helped companies meet the security requirements needed to win and grow business. We bring both the capability and confidence that our customers value and depend on. And we always deliver.

This posting will close within 90 days from the Posting Date.