> Markdown version of [/jobs/ext/4474387-penetration-tester-journeyman](https://www.wearedevelopers.com/jobs/ext/4474387-penetration-tester-journeyman). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester Journeyman

- **Company:** OneZero Solutions
- **Location:** Alexandria, VA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** C (Programming Language), Active Directory, Software System Penetration Testing, C++ (Programming Language), CompTIA Security+, Cyber Security, Databases, Desktop Computing, Mobile Application Software, Python (Programming Language), Network Security, Open Source Technology, Windows PowerShell, Anti-Phishing, Red Team (Cyber Security), Software Repository, Malware, Hardware Infrastructure
- **Published:** October 16, 2026
- **Apply:** https://www.thejobnetwork.com/job/43bb61cc-1a03-446a-b7a6-379da6edda8f/penetration-tester-journeyman

## About the Role

* Relevant Years of Experience: 2 to 3 years
 * Hands on experience with computers and network security.
 * Experience conducting phishing campaigns or social engineering.
 * Hands on experience with red team tasks and pen testing.
 * Familiarity with malware development and EDR/AV bypass strategies.
 * Experience with PowerShell, C, C++, or Python.
 * Hands on experience utilizing Command and Control (C2) Frameworks such as Cobalt Strike, Sliver, Havoc, etc.

Certifications: IAT II : Any one of the following

 * GPEN, Red Team Apprentice Course (RTAC), or equivalent
 * Examples or required certifications: IAT level II:
 * CompTIA Security+ CE
 * CompTIA CySA+
 * CCNA Security
 * GICSP
 * GSEC
 * SSCP

IAT level III: Any one of the following

 * CASP+ CE (also called SecurityX)
 * CISSP (or Associate)
 * CISA
 * CCNP Security
 * GCED
 * GCIH

Education: BA/BS or equivalent years of relevant experience

## Description

Adversary Simulation:

 * Deploy, configure, and operate C2 frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.
 * Apply TTPs for initial access, lateral movement, privilege escalation, persistence and data exfiltration.
 * Leverage proprietary and open-source offensive security tool sets effectively to achieve engagement objectives.
 * Execute phishing assessments.

Infrastructure:

 * Monitor, manage, and maintain cloud and on-premise infrastructure used during assessments.
 * Understanding the use of Git Repositories for maintaining operational tools and scripts.

Penetration Testing:

 * Internal and external penetration testing.
 * Network mapping and enumeration.
 * Assess web and mobile applications.
 * Perform database scans.
 * Assess Active Directory attack paths using tools such as BloodHound.

Security Assessments:

 * Assessing Coast Guard's cyber security posture of operational networks through adversary emulation.
 * Develop reports and briefs detailing findings and recommendations for all assessments completed.
 * Perform cyber threat emulation during scripted exercises, to train DoD Cyber Protection Teams