> Markdown version of [/jobs/ext/1248967-senior-penetration-tester](https://www.wearedevelopers.com/jobs/ext/1248967-senior-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Penetration Tester

- **Company:** T S 1, LLC
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Salary:** $126,300.0 - $152,103.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), .NET Framework, Microsoft Windows, Active Directory, Software System Penetration Testing, Automation of Tests, Bash Shell, Unix, Cloud Computing, Software Debugging, Linux, DevOps, Perl (Programming Language), Cryptographic Protocols, Intrusion Detection and Prevention, Python (Programming Language), Microsoft SQL Server, Network Protocols, Open Source Technology, Oracle Databases, Windows PowerShell, Web Applications, Scripting, GWAPT
- **Published:** July 12, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=255886b5c2e558cf

## About the Role

* US Citizenship or Green Card Holder
 * Highly organized and detail oriented
 * Strong written and verbal communication skills, including the ability to articulate technical concepts, impacts, risks, mitigations, and remediation guidance
 * Advanced experience with common pen testing toolsets
 * Ability to perform penetration testing with minimal reliance on automated tools
 * Experience working in a large government or military environment
 * Expert level understanding of networking protocols and web application architecture
 * Strong familiarity with Java and .NET based web applications
 * Expert level familiarity with both Windows and Unix operating systems

Preferred Skills/Qualifications/Certifications:

 * Able to properly install, configure, and run common open-source testing tools
 * Extensive knowledge of Windows and Linux operating systems
 * Strong familiarity with Microsoft Active Directory security concepts
 * Strong familiarity with Microsoft SQL Server and Oracle database concepts
 * Deep knowledge of cryptographic protocols
 * Experience developing custom payloads and exploit chains
 * Strong familiarity with application DevOps concepts, tools, and technologies
 * Advanced scripting experience (Python, Bash, Perl, PowerShell, Command Shell, etc.)
 * Advanced experience with debuggers and disassemblers
 * Advanced knowledge of intrusion detection evasion techniques

## Description

* Assist with the technical execution of pen testing (Cloud, Web, Network) activities, including scoping, test plan creation, and technical execution.
 * Assist with customer interactions, including planning, kickoff, and debriefing meetings
 * Coordinate with other cybersecurity teams as necessary
 * Years of Experience Required: 5 years
 * Education Requirements: Bachelor's/Master's Degree Preferred
 * At least one of the following security certifications (i.e., Security +, OSCP, CEH, OSWE, CISSP, GPEN, GWAPT, etc.)


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security)
- [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [The Time Paradox: Building Timezone-Safe Python/Django Applications](https://www.wearedevelopers.com/videos/1915-the-time-paradox-building-timezone-safe-python-django-applications)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)