> Markdown version of [/jobs/ext/3376849-penetration-tester](https://www.wearedevelopers.com/jobs/ext/3376849-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** ADRISAN, LLC
- **Location:** Alexandria, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Software System Penetration Testing, Bash Shell, Burp Suite, Cyber Security, Linux, Domain Name System (DNS), Emulators, Intrusion Detection and Prevention, Python (Programming Language), Network Protocols, Nmap, Open Web Application Security, Windows PowerShell, TCP/IP, Web Applications, Web Testing, Scripting, Cloud Platform System, GWAPT, Information Technology, Metasploit
- **Published:** September 1, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9134371/penetration-tester

## About the Role

* Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related field.
 * Experience: 5+ years of hands-on experience conducting, supporting, or leading full-scope penetration tests.
 * Core Technical Skills:
o Deep understanding of operating system internals (Windows, Linux) and network protocols (TCP/IP, HTTP/S, DNS, SMB).
o Hands-on proficiency with offensive testing frameworks (e.g., Burp Suite, Metasploit, Nmap, Cobalt Strike).
o Strong web application testing techniques (e.g., OWASP Top 10 exploitation).
o Scripting capability in Python, PowerShell, Bash, or Go for custom exploit payload delivery and automation.

Preferred Certifications:

 * Offensive Security: OSCP (Offensive Security Certified Professional), CEH (Certified Ethical Hacker), GPEN (GIAC Penetration Tester), or GWAPT (GIAC Web Application Penetration Tester).

## Description

* Offensive Security Assessments: Plan and execute comprehensive penetration tests across web applications, external/internal networks, cloud environments, and operating systems.
 * Vulnerability Exploitation: Safely identify, validate, and exploit technical security flaws, logical weaknesses, and misconfigurations to measure real-world business risk.
 * Red Teaming & Adversary Emulation: Simulate modern adversary tactics, techniques, and procedures (TTPs) to evaluate defensive controls and incident response detection capabilities.
 * Tooling & Automation: Utilize standard penetration testing frameworks while developing custom scripts and tools to streamline assessment workflows and target specific systems.
 * Technical Reporting & Remediation: Author detailed assessment reports detailing attack chains, proof-of-concept exploits, and prioritized technical remediation guidance for engineering teams.
 * Stakeholder Collaboration: Partner with developers, system administrators, and security leads to debrief assessment findings and validate implemented patches through re-testing.