> Markdown version of [/jobs/ext/3952824-penetration-tester](https://www.wearedevelopers.com/jobs/ext/3952824-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** Caci Inc
- **Location:** Chantilly, VA, United States
- **Salary:** $113,200.0 - $237,800.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Software System Penetration Testing, Bash Shell, Burp Suite, Computer Networks, Cross-Site Request Forgery, Data Centers, Linux, Perl (Programming Language), VMware ESX Servers, Fuzz Testing, Internet Security, Python (Programming Language), Kali Linux, Open Source Technology, Open Web Application Security, Windows PowerShell, Anti-Phishing, Ruby, Single Sign-On, SQL Injection, System Programming, TCP/IP, Web Applications, Scripting, Cyber Threat Analysis, Cross-Site Scripting (XSS), Metasploit, Iptables
- **Published:** October 27, 2026
- **Apply:** https://www.careerbuilder.com/job-details/penetration-tester-chantilly-va--92ee18e5-dbd1-4946-bc84-1524bdb69132

## About the Role

Penetration Testing, Sensitive Compartmented Information (SCI), Top Secret Clearance, Willing to Travel, Network Performance/Analysis, Computer Networks, Internet Security, Security Analysis, Compensation and Benefits, Team Building

## Description

* Scripting (Windows/*nix), Bash, Python, Perl or Ruby, Systems Programming is a plus.
 * Existing Subject Matter Expert of Advanced Persistent Threats and Emerging Threats.
 * Proactive interest in emerging technologies and techniques related to penetration testing.
 * Demonstrated real world experience performing grey and black box penetration testing.
 * Have an understanding of and interest in common web application vulnerabilities like XSS, CSRF, Command Injection, SQLi, single sign-on limitations, etc.
 * Must be proficient in any of the following: PowerShell Empire, Metasploit Framework, Cobalt Strike, Burp Suite, Canvas, Kali Linux, IPTables, Sysinternals, A/V evasion methodologies, Exploit Dev.
 * Must have solid working experience and knowledge of Windows operating systems (incl. Active Directory), Linux operating systems; ESXi or similar; mobile platforms are a plus.
 * Solid understanding of networking, TCP/IP, virtualization and cloud/data center architecture.
 * Strong familiarity with some of the following: OWASP top 10, DoD and NSA Vulnerability and Penetration Testing Standards.
 * Knowledge of exploitation concepts including phishing and social engineering tactics, buffer overflows, fuzzing, SQLi, MiTM, covert channels, secure tunneling and open source exfiltration techniques.
 * Bachelors degree in related field.
 * Active TS/SCI w/polygraph clearance.