> Markdown version of [/jobs/ext/3933291-penetration-tester-ts-sci-with-polygraph](https://www.wearedevelopers.com/jobs/ext/3933291-penetration-tester-ts-sci-with-polygraph). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester - TS/SCI with Polygraph

- **Company:** General Dynamics Information Technology
- **Location:** Bethesda, MD, United States
- **Experience:** Expert
- **Salary:** $172,144.0 - $232,900.0
- **Contract:** Permanent contract
- **Skills:** Access Network, Software System Penetration Testing, Static Program Analysis, Cyber Security, Information Systems, Databases, Computer Engineering, Domain Name System (DNS), Identity and Access Management, Internet Protocol, Network Protocols, TCP/IP, Web Applications, Web Services, Software Security, Information Technology, Network Server, Vulnerability Analysis
- **Published:** October 26, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3467280933&tx=FL131FFK&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

Data Reporting,Networks,Risk Management, 8 + years of related experience, * Education: Bachelor's degree in computer engineering, Computer Science, Electrical Engineering, Information systems, Information Technology, Cybersecurity, or a closely related discipline.

 * A Master's degree in an applicable discipline be substituted for three years of demonstrated work experience
 * Experience: 8+ years of related experience
 * Security clearance level: TS/SCI with Polygraph
 * US citizenship required

DESIRED SKILLS

 * Certifications: CEH - Certified Ethical Hacker Certification, CPT - Certified Penetration Tester
 * Strong writing skills
 * Experience with NIST 800-53 and Risk Management Framework
 * Knowledge of system and application security threats and vulnerabilities
 * Knowledge of network access, identity, and access management e.g. public key infrastructure (PKI).
 * Knowledge of network protocols such as Transition Control Protocol/Internet Protocol (TCP/IP), Dynamic Host Configuration, Domain Name System (DNS), and directory Services.
 * Ability to assess the robustness of security systems and designs.
 * Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
 * Write final reports and defend all findings, including risk or vulnerability, mitigation strategies, and references.
 * Report vulnerabilities identified during security assessments.
 * Conducted security reviews, technical research and provided reporting to increase security defense mechanisms.
 * Travel Domestic 0-25%.

## Description

* Conduct internal penetration testing and vulnerability assessment of servers, web applications, web services, and databases
 * Manually exploit and compromise operating systems, web applications, and databases
 * Examine results of web/OS scanners, scans and static source code analysis
 * Identify vulnerabilities, misconfigurations, and compliance issues
 * Write final reports, defend all findings to include the risk or vulnerability, mitigation strategies, and references
 * Ability to meet and coordinate with various audiences to include developers, system administrators, project managers, and senior government stakeholders
 * Provide security recommendations for developers, system administrators, project managers, and senior government stakeholders
 * Report vulnerabilities identified during security assessments
 * Write penetration testing Rules of Engagements (RoE), Test Plans, and Standard Operating Procedures (SOP)
 * Conduct security reviews, technical research, and provided reporting to increase security defense mechanisms
 * Make recommendations to the IC CISO or designee for improving TTPS for better cyber threat protection.