The Role
Conduct web application, API, network, red team, and purple team penetration testing for a U.S. Government client. Identify vulnerabilities, test security controls, support firewall and load-balancing technologies, document network configurations, develop progress reports, and communicate attack paths and remediation recommendations. The role requires extensive experience with Kali Linux, Burp Suite, Metasploit, Cobalt Strike, scripting, phishing exercises, PCI-DSS testing, OWASP ASVS, and MITRE ATT&CK. Candidates must be able to obtain Public Trust clearance.
Summary Generated by Built In
Overview
PLEASE NOTE: No corp-to-corp candidates will be accepted.
- Tier One Technologies is seeking a Penetration Tester to support our US Government client.
- This hybrid contract-to-hire position can be originated in Falls Church, VA; Raleigh, NC or Eagan, MN.
- SELECTED CANDIDATES WITHOUT REQUIRED CLEARANCE WILL BE SUBJECT TO A FEDERAL GOVERNMENT BACKGROUND INVESTIGATION TO RECEIVE IT.
- Monitor and optimize network performance to ensure reliability and efficiency.
- Develop and maintain accurate network documentation, diagrams, and configurations.
- Identify and mitigate vulnerabilities affecting network switches.
- Provide support for firewall and load-balancing technologies.
- Collaborate with other IT teams to develop and implement integrated system solutions.
- Prepare regular progress reports documenting project status, milestones, and key updates.
- A degree from an accredited College/University in the applicable field of services is required. If the individual's degree is not in the applicable field, then 4 additional years of related experience is required.
- 8+ years of IT-related work experience.
- Highly skilled in web application testing, API testing, and network testing.
- Prior experience with Burp Suite Professional, or other similar DAST tools.
- Experience with AI and penetration testing AI.
- Experience with Kali Linux and most of the tools available in the distro for penetration testing.
- Experience with tools such as Metasploit Pro and Cobalt Strike for red team operations.
- Experience with Red Team engagements from planning to execution.
- Experience with phishing network users to gain access for lateral movement on the network.
- Experience with Purple Team engagements to test monitoring controls in coordination with engineering teams and CSOC teams.
- Proficiency in scripting, such as Python and/or PowerShell.
- Experience with penetration testing supporting PCI-DSS.
- Technical writing skills, along with ease in communicating concepts related to security vulnerabilities and attack path scenarios.
- Familiar with OWASP Application Security Verification Standard (ASVS) and MITRE ATT&CK framework.
- Penetration testing certification recommended. Acceptable certifications: Offensive Security Certified Professional (OCSP), Global Information Assurance Certification (GIAC) Certifications (e.g., GIAC Certified Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), or GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)).
- Exceptional communication skills.
- Ability to obtain Public Trust Clearance.
- Must be a US Citizen or Permanent Status Green Card holder.
- Must have lived in the US for the past 5 years.
- Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)
Skills Required
- Degree from an accredited college or university in the applicable field, or four additional years of related experience if the degree is not in the applicable field
- 8 or more years of IT-related work experience
- Highly skilled in web application testing, API testing, and network testing
- Experience with Burp Suite Professional or similar DAST tools
- Experience with AI and penetration testing AI
- Experience with Kali Linux and penetration-testing tools available in the distribution
- Experience with Metasploit Pro and Cobalt Strike for red team operations
- Experience planning and executing red team engagements
- Experience conducting phishing exercises to gain access for network lateral movement
- Experience conducting purple team engagements with engineering and CSOC teams
- Proficiency in Python and/or PowerShell scripting
- Experience with penetration testing supporting PCI-DSS
- Technical writing and communication skills related to security vulnerabilities and attack paths
- Familiarity with OWASP Application Security Verification Standard and MITRE ATT&CK
- Penetration testing certification, such as OSCP, GPEN, GWAPT, or GXPN
- Exceptional communication skills
- Ability to obtain Public Trust clearance
- Must be a U.S. citizen or permanent resident Green Card holder
- Must have lived in the United States for the past five years
- No more than six months of travel outside the United States during the past five years, excluding military service
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Tier One Technologies is a national technical consulting, recruiting, and IT contracting firm serving primarily federal, state, and local government clients. It staffs IT professionals and provides software application management and development, business analysis, quality assurance, systems and network engineering, business intelligence, web services, infrastructure and security management, cybersecurity, and related administrative support for mission-critical work across civilian, defense, intelligence, and security sectors.
