Sr. Penetration Tester

Job Description

Job Description

Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes.

We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.

Title: Sr. Penetration Tester

Location: Onsite – Washington, DC (telework at client discretion)

Terms: Full-time

Salary: $140K - $175K

Clearance: Public Trust

Travel: Minimal – occasional CONUS travel (approximately one week per year)

Position Description

We are seeking a Sr. Penetration Tester to conduct advanced security assessments and penetration tests across networks, applications, and infrastructure for a federal cybersecurity program. This role identifies vulnerabilities, evaluates their severity, and provides detailed reports to stakeholders to prioritize remediation efforts, often leading projects and mentoring junior team members while staying current on emerging threats and security trends.

The successful candidate will:

• Lead advanced security assessments and penetration tests.
• Evaluate vulnerability severity and help stakeholders prioritize remediation.
• Mentor junior team members.
• Stay current on emerging threats and security trends.

Responsibilities:

• Conduct advanced security assessments and penetration tests across networks, applications, and infrastructure.
• Identify vulnerabilities, evaluate their severity, and provide detailed reports to stakeholders to prioritize remediation efforts.
• Perform no-knowledge and/or limited-knowledge technical assessments (Red Teaming) of identified assets and their cloud environments.
• Conduct real and simulated attacks against segments of the enterprise to assess resiliency and response to an actual attack.
• Collaborate on ways to defend, alter, or reconfigure cybersecurity defense mechanisms (Blue Teaming), and ensure information sharing between Red and Blue teams (Purple Teaming).
• Conduct penetration tests only with the knowledge and authorization of the client CISO, after appropriate authorities, approvals, and Rules of Engagement are established.
• Develop Rules of Engagement documents defining the type and scope of testing at least 30 days before each assessment.
• Identify in advance any application or operational risks of loss or denial of service that might result from penetration testing techniques.
• Produce penetration test and assessment reports within 15 business days, including an executive summary, technical risks, potential impact, and remediation options.
• Coordinate with the client to use penetration test findings to inform, expand, or focus monitoring efforts.
• Provide onsite and remote vulnerability assessments, working with system owners and administrators to examine security architecture and vulnerabilities through scans, configuration review, design documentation review, and interviews.
• Perform wireless assessments, including wireless access point detection and penetration testing, and produce Wireless Assessment Reports with an executive summary, network mapping, vulnerability analysis, and configuration assessment.
• Perform web application assessments of outward-facing web applications for exploitable defects in web service implementation.
• Support operating system security and database assessments against configuration baselines.
• Develop custom scripts and tools to automate testing.
• Lead assessment projects and mentor junior team members.

Required Skills and Experience

• Bachelor's degree in Computer Science or an IT-related discipline and 5 years of related experience.
• CISSP or equivalent certification. (Equivalent certification covers a similar level of information security domains or depth of knowledge and/or experience.)
• Demonstrated significant hands-on experience in penetration testing methodologies, various hacking techniques, and expertise in relevant security tools and frameworks.
• Proficiency with penetration testing tools such as Burp Suite, Nmap, Metasploit, Nessus, and custom scripts.
• Familiarity with scripting languages such as Python, PowerShell, or similar for automation and custom tool development.

Desired

• Experience performing penetration testing on federal government contracts as a contractor, under government-approved Rules of Engagement.
• Offensive certifications such as OSCP, GPEN, or CEH in addition to CISSP.
• Experience with Red, Blue, and Purple Team exercises.
• Experience assessing cloud and industrial control system (ICS) environments.

Work Authorization/Clearance: Must be a US Citizen and have or are able to obtain a Federal Government Public Trust clearance.

#LinkedIn #Dice

___________________________________________________________________________________________________________

Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day.  Some of these recognitions include:  

• Recognized as a Top 20 "Best Place to Work in Virginia"
• Recipient of Department of Labor's HireVets Gold Medallion
• Great Place to Work Certification for five years running
• A Virginia Chamber of Commerce Fantastic 50 company
• A Northern Virginia Technology Council Tech 100 company 
• Inc. 5000 list of fastest growing companies for eleven years
• Two-time SBA SBIR Tibbett's Award winner
• Virginia Values Veterans (V3) Certification

We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family!   In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to

• Traditional and HSA- eligible medical insurance plans 
• 100% employer-paid dental and vision insurance options 
• 100% employer-sponsored STD, LTD, and life insurance
• 5% 401(k) company matching
• Flexible-schedules and teleworking options
• Paid holidays and PTO Accrual Plans
• Paid Parental Leave
• Professional development and career growth opportunities 
• Team and company-wide events, recognition, and appreciation-- and so much more! 

Check out our Revolutional | LinkedIn to find out a little more about who we are and if we are the right next step for your career!   

Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans.  To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily.  Other duties in addition to those listed may be assigned as necessary to meet business needs.  Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job.  If you are in need of an accommodation, please contact View email address on ziprecruiter.com.

"Know Your Rights: Workplace Discrimination is Illegal" Poster | U.S. Equal Employment Opportunity Commission