Experienced Penetration Tester

n \n

• Identify and document vulnerabilities, misconfigurations, and compliance issues through thorough examination of external and internal infrastructure, systems, and security controls. \n

• Develop and execute approved Rules of Engagement (RoE), test plans, and standard operating procedures (SOPs) aligned with client requirements, penetration testing best practices, and approved testing boundaries. \n

• Plan, scope, conduct, and document penetration testing across internal and external networks, web applications, APIs, databases, cloud services, Active Directory, and other identity technologies. \n

• Perform the full testing lifecycle, from non-intrusive scanning and vulnerability discovery through exploitation, privilege escalation, lateral movement, and other post-exploitation activities, within the approved RoE. \n

• Analyze findings, identify attack paths, assess technical and mission impact, and recommend practical corrective actions. \n

• Promptly escalate critical and high-risk findings to client leadership in accordance with the approved RoE. \n

• Prepare accurate, well-written technical reports that describe findings, exploitation procedures, risks, and actionable remediation recommendations, and present results to developers, system administrators, project managers, and senior Government stakeholders. \n

• Safeguard sensitive information encountered during testing (e.g., credentials, personally identifiable information, and controlled unclassified information) in accordance with client security policies. \n

• Manage assignments and changing priorities, meet deadlines, coordinate with stakeholders, and proactively identify, communicate, and help resolve risks and issues. \n

• Contribute to the continuous improvement of penetration testing methodologies, tools, and frameworks, and participate in technical reviews, knowledge sharing, and mentoring. \n, Applicants selected will be subject to a security investigation. Final placement is contingent upon obtaining and maintaining the required eligibility and receiving Government approval. U.S. citizenship is required for this position in accordance with Federal requirements.

• Experience independently planning, executing, documenting, and presenting complex penetration testing engagements. \n

• Ability to provide a past performance report or comparable documentation (e.g., a sanitized penetration test report you authored or detailed project examples) that demonstrates your competency level as a penetration tester. Do not submit client-identifying, classified, or controlled information. \n

• At least five (5) years of hands-on penetration testing experience across infrastructure (internal and external networks), application (web applications and APIs), cloud, and identity-centric (e.g., Active Directory, Entra ID, and federation/SSO) environments. \n

• Current Offensive Security Certified Professional (OSCP or OSCP+) or GIAC Penetration Tester (GPEN) certification, or an equivalent hands-on offensive security certification (e.g., GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) or OffSec Experienced Penetration Tester (OSEP)). \n

• Ability to read and use results of various security testing tools, perform false-positive analysis and validation, and communicate results and recommended remediation actions to technical and non-technical audiences. \n

• Strong knowledge of network, application, cloud, and identity security and industry-standard penetration testing tools (e.g., Burp Suite, Metasploit, Nmap, Nessus, BloodHound, Impacket, and command-and-control frameworks). \n

• Strong analytical, problem-solving, written and verbal communication, technical writing, and documentation skills, with attention to accuracy and completeness. \n

• Ability to work independently and collaboratively while managing multiple priorities. \n, * Active Secret or Top Secret clearance. \n

• Bachelor’s degree or higher in Cybersecurity or a related field. \n

• Experience supporting Federal, law enforcement, defense, intelligence community, or similarly sensitive environments. \n

• Working knowledge of relevant Federal cybersecurity requirements, NIST security testing guidance (e.g., NIST SP 800-115), OWASP security testing practices, and the MITRE ATT&CK framework. \n

• Experience serving as a senior technical specialist, technical lead, or subject matter expert, including reviewing technical work products and mentoring less experienced staff. \n

• Ability to automate testing, analysis, or reporting using Python, PowerShell, Bash, or similar languages. \n

• Experience briefing senior leadership and translating technical findings into recommendations tied to operational or mission impact. \n

• Additional relevant certifications such as GIAC Web Application Penetration Tester (GWAPT), GIAC Cloud Penetration Tester (GCPN), OffSec Web Expert (OSWE), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or similar. \n

B&M Cyber is seeking an experienced Penetration Tester to support cybersecurity testing activities for our Federal clients. The successful candidate will plan and conduct hands-on penetration testing across infrastructure, application, cloud, and identity environments and provide actionable recommendations to improve our clients’ security posture., n

B&M Cyber (B&M Consulting Group, Inc.) is a woman-owned small business (WOSB) with significant expertise and experience providing cybersecurity services to clients throughout the Federal government. We value collaboration, innovation, and continuous growth. Our employees work closely across corporate and client teams in a consulting environment to solve challenges and provide exceptional service. We foster a supportive environment where team members can share ideas, build new skills, and pursue the areas they are passionate about.