> Markdown version of [/jobs/ext/3835476-experienced-penetration-tester](https://www.wearedevelopers.com/jobs/ext/3835476-experienced-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Experienced Penetration Tester - **Company:** B&M CONSULTING GROUP, INC. - **Location:** Washington, DC, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Active Directory, Application Programming Interfaces (APIs), Software System Penetration Testing, Automation of Tests, Bash Shell, Burp Suite, Cloud Computing, Cyber Security, Databases, Identity and Access Management, Information Systems Security Architecture Professional, Python (Programming Language), Nmap, Open Web Application Security, Windows PowerShell, Cloud Services, Web Applications, Mitre Att&ck, GWAPT, Metasploit, Nessus - **Published:** October 19, 2026 - **Apply:** https://www.thejobnetwork.com/job/a9cde791-40bb-463d-8c62-d87925de0f2c/experienced-penetration-tester ## About the Role * Experience independently planning, executing, documenting, and presenting complex penetration testing engagements. \n * Ability to provide a past performance report or comparable documentation (e.g., a sanitized penetration test report you authored or detailed project examples) that demonstrates your competency level as a penetration tester. Do not submit client-identifying, classified, or controlled information. \n * At least five (5) years of hands-on penetration testing experience across infrastructure (internal and external networks), application (web applications and APIs), cloud, and identity-centric (e.g., Active Directory, Entra ID, and federation/SSO) environments. \n * Current Offensive Security Certified Professional (OSCP or OSCP+) or GIAC Penetration Tester (GPEN) certification, or an equivalent hands-on offensive security certification (e.g., GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) or OffSec Experienced Penetration Tester (OSEP)). \n * Ability to read and use results of various security testing tools, perform false-positive analysis and validation, and communicate results and recommended remediation actions to technical and non-technical audiences. \n * Strong knowledge of network, application, cloud, and identity security and industry-standard penetration testing tools (e.g., Burp Suite, Metasploit, Nmap, Nessus, BloodHound, Impacket, and command-and-control frameworks). \n * Strong analytical, problem-solving, written and verbal communication, technical writing, and documentation skills, with attention to accuracy and completeness. \n * Ability to work independently and collaboratively while managing multiple priorities. \n, * Active Secret or Top Secret clearance. \n * Bachelor's degree or higher in Cybersecurity or a related field. \n * Experience supporting Federal, law enforcement, defense, intelligence community, or similarly sensitive environments. \n * Working knowledge of relevant Federal cybersecurity requirements, NIST security testing guidance (e.g., NIST SP 800-115), OWASP security testing practices, and the MITRE ATT&CK framework. \n * Experience serving as a senior technical specialist, technical lead, or subject matter expert, including reviewing technical work products and mentoring less experienced staff. \n * Ability to automate testing, analysis, or reporting using Python, PowerShell, Bash, or similar languages. \n * Experience briefing senior leadership and translating technical findings into recommendations tied to operational or mission impact. \n * Additional relevant certifications such as GIAC Web Application Penetration Tester (GWAPT), GIAC Cloud Penetration Tester (GCPN), OffSec Web Expert (OSWE), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or similar. \n ## Description n \n * Identify and document vulnerabilities, misconfigurations, and compliance issues through thorough examination of external and internal infrastructure, systems, and security controls. \n * Develop and execute approved Rules of Engagement (RoE), test plans, and standard operating procedures (SOPs) aligned with client requirements, penetration testing best practices, and approved testing boundaries. \n * Plan, scope, conduct, and document penetration testing across internal and external networks, web applications, APIs, databases, cloud services, Active Directory, and other identity technologies. \n * Perform the full testing lifecycle, from non-intrusive scanning and vulnerability discovery through exploitation, privilege escalation, lateral movement, and other post-exploitation activities, within the approved RoE. \n * Analyze findings, identify attack paths, assess technical and mission impact, and recommend practical corrective actions. \n * Promptly escalate critical and high-risk findings to client leadership in accordance with the approved RoE. \n * Prepare accurate, well-written technical reports that describe findings, exploitation procedures, risks, and actionable remediation recommendations, and present results to developers, system administrators, project managers, and senior Government stakeholders. \n * Safeguard sensitive information encountered during testing (e.g., credentials, personally identifiable information, and controlled unclassified information) in accordance with client security policies. \n * Manage assignments and changing priorities, meet deadlines, coordinate with stakeholders, and proactively identify, communicate, and help resolve risks and issues. \n * Contribute to the continuous improvement of penetration testing methodologies, tools, and frameworks, and participate in technical reviews, knowledge sharing, and mentoring. \n, Applicants selected will be subject to a security investigation. Final placement is contingent upon obtaining and maintaining the required eligibility and receiving Government approval. U.S. citizenship is required for this position in accordance with Federal requirements.