> Markdown version of [/jobs/ext/2271710-penetration-tester](https://www.wearedevelopers.com/jobs/ext/2271710-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** Booz Allen Hamilton Inc.
- **Location:** Herndon, VA, United States
- **Experience:** Experienced
- **Salary:** $86,800.0 - $198,000.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), JavaScript (Programming Language), Microsoft Windows, Software System Penetration Testing, Cloud Computing, Information Systems, Linux, Python (Programming Language), Network Security, Ruby, Traffic Analysis, Rust (Programming Language)
- **Published:** August 27, 2026
- **Apply:** https://jobs.localjobnetwork.com/apply/add/88162433/1

## About the Role

* 3+ years of experience with cyber penetration testing or developing risk and threat mitigation plans
 * 3+ years of experience operating in Linux, Windows, and virtual platforms
 * 3+ years of experience with computer attack methods and system exploitation techniques
 * 3+ years of experience leveraging adversarial tactics to conduct hands-on security testing
 * 3+ years of experience performing network security analysis, including software or traffic analysis
 * TS/SCI clearance with a polygraph
 * HS diploma or GED

Nice If You Have:

 * Experience manually auditing source code, including Java, Ruby, Python, JavaScript, Rust, or C, to find security issues
 * Knowledge of tools, tactics, and techniques targeting Artificial Intelligence (AI) systems and their ecosystems
 * Bachelor's degree in CS, Information Systems, Engineering, or a relatedfield
 * Offensive Security Certified Professional (OSCP), HTB Certified Penetration Tester Specialist (CPTS), eLearnSecurity Junior Penetration Tester (EJPT), GIAC Global Information Assurance Penetration Tester (GPEN), or GIAC Cloud Penetration Tester Certification

## Description

Conduct testing and analysis to identify vulnerabilities and potential threat vectors in systems and networks, develop exploits, and engineer attack methodologies.Apply advanced advising skills, extensive technical expertise, and full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction, and mentor and supervise team members, as needed.


## Related Videos

- [Coffee with Developers: David Heinemeier Hansson](https://www.wearedevelopers.com/videos/875-coffee-with-developers-david-heinemeier-hansson)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Coroutine explained yet again 60 years later](https://www.wearedevelopers.com/videos/690-coroutine-explained-yet-again-60-years-later)
- [Security Blindspots and How to Learn About Them - Anna Oliveira](https://www.wearedevelopers.com/videos/1754-security-blindspots-and-how-to-learn-about-them-anna-oliveira)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)