> Markdown version of [/jobs/ext/4167294-penetration-tester](https://www.wearedevelopers.com/jobs/ext/4167294-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Penetration Tester - **Company:** M9 Solutions - **Location:** Baltimore, MD, United States - **Salary:** $120,000.0 - $135,000.0 - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, Red Team (Cyber Security), Web Applications, Information Technology, Vulnerability Analysis - **Published:** October 31, 2026 - **Apply:** https://www.dice.com/job-detail/3797c82c-6031-4aa6-8052-185e86f992f2 ## About the Role * Public Trust security clearance. * Bachelor's degree. * Hands-on experience conducting web application penetration testing. * Experience performing network and infrastructure penetration testing. * Experience conducting vulnerability assessments and identifying security weaknesses. * Strong understanding of penetration testing methodologies and security best practices. * OSCP (Offensive Security Certified Professional) certification. Preferred Skills and Qualifications * Experience supporting Red Team operations. * Familiarity with Command and Control (C2) frameworks. * Experience with malware creation or development in support of authorized security testing. ## Description M9 Solutions is seeking a Penetration Tester to work on-site in support of a government contract for a client located in Woodlawn, MD. An active Public Trust clearance is required. Responsibilities * Conducts penetration testing across web applications, networks, and IT infrastructure. * Performs vulnerability assessments to identify potential security risks and weaknesses. * Identifies, validates, and documents security vulnerabilities and potential attack vectors. * Evaluates security controls and identifies areas for improvement. * Prepares reports detailing security findings, associated risks, and recommended remediation actions. * Collaborates with technical and security teams to communicate findings and support remediation efforts.