TS/SCI Red Cell Penetration Tester

We are seeking an experienced Red Team Penetration Tester III to support a long-term federal cybersecurity program focused on assessing and strengthening the security posture of mission-critical systems through real-world offensive cyber operations.

This is a true hands-on offensive security position. The ideal candidate will have extensive experience conducting penetration testing, adversary emulation, exploit development, post-exploitation activities, privilege escalation, and lateral movement across enterprise environments. This role is best suited for someone who enjoys thinking and operating like an attacker to identify vulnerabilities before malicious actors can exploit them.

Responsibilities Conduct advanced penetration testing and red team engagements against enterprise systems and applications. Emulate real-world threat actors and Advanced Persistent Threat (APT) tactics, techniques, and procedures (TTPs). Perform exploit development, post-exploitation activities, lateral movement, persistence, and privilege escalation. Assess Active Directory environments and identify opportunities for compromise and escalation. Utilize offensive security tools including Cobalt Strike, Metasploit, Nmap, Kali Linux, Burp Suite, and similar platforms. Identify security weaknesses and provide detailed technical findings and remediation recommendations. Develop custom scripts and tools to support offensive security operations. Produce high-quality technical reports and present findings to technical and non-technical stakeholders. Collaborate with defensive cybersecurity teams to improve detection and response capabilities.

Bachelor’s degree in one of the following or a related technical discipline, Computer Science Software Engineering Computer Engineering Electrical Engineering Mathematics with a Computer Science concentration Experience 7+ years of dedicated penetration testing or offensive cyber operations experience. Hands-on experience conducting: Red team engagements Adversary emulation Exploit development Post-exploitation activities Lateral movement and privilege escalation Experience working within Active Directory environments. Proficiency with offensive security tools such as: Cobalt Strike Metasploit Nmap Kali Linux Burp Suite Experience operating in Windows, Linux, and macOS environments. Strong scripting or programming experience in at least two languages such as: Python C++ Java Rust C# Assembly Certifications, CSSP Auditor Clearance Active TS/SCI clearance required.

Nice to Have Skills & Experience

Experience supporting Navy or DoD cyber operations programs. Experience conducting enterprise-level adversary emulation exercises. Familiarity with MITRE ATT&CK methodologies. Experience briefing executive leadership and technical stakeholders.

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.