> Markdown version of [/jobs/ext/4701717-penetration-tester](https://www.wearedevelopers.com/jobs/ext/4701717-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** SkyePoint Decisions, Inc.
- **Location:** Sterling, VA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Amazon Web Services, Software System Penetration Testing, Bash Shell, Burp Suite, Cyber Security, Information Systems, Python (Programming Language), Kali Linux, Linux System Administration, Nmap, Windows PowerShell, Comptia Pentest+ CE, Red Team (Cyber Security), Wireshark, Web Applications, Windows Desktop, Scripting, Computer Networking Systems, Cloud Platform System, Mitre Att&ck, Information Technology, Metasploit, Nessus
- **Published:** November 13, 2026
- **Apply:** https://jobs.localjobnetwork.com/apply/add/88860380/1

## About the Role

* Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or related field, or equivalent relevant experience.
 * 5+ years' experience in the subject area.
 * Professional certification such as CEH, CompTIA PenTest+, or OSCP.
 * Demonstrated experience conducting penetration testing, Red Team assessments, or offensive-security testing.
 * Hands-on experience testing enterprise networks, applications, APIs, and/or cloud environments.
 * Knowledge of common exploitation techniques and attack paths across Windows and Linux environments.
 * Experience translating technical testing results into well-supported findings and remediation recommendations.
 * Working knowledge of MITRE ATT&CK and penetration-testing methodologies.
 * U.S. Citizenship required.
 * Must be able to obtain High Risk Public Trust Security Clearance., * Active Secret or Top Secret security clearance.
 * Experience with tools such as Burp Suite, Nmap, Metasploit, Kali Linux, Wireshark, Nessus/Tenable, BloodHound, or comparable offensive security tools.
 * Familiarity with Windows and Linux environments.
 * Exposure to AWS cloud security testing.
 * Familiarity with NIST SP 800-115.
 * Scripting experience using Python, PowerShell, Bash, or similar technologies.

## Description

* Support authorized red team and penetration testing engagements across FSA systems, networks, applications, APIs, and cloud environments.
 * Conduct vulnerability validation and exploitation activities under established rules of engagement.
 * Assist with reconnaissance, enumeration, attack-path analysis, exploitation, and post-exploitation activities.
 * Perform web application, network, API, and infrastructure security testing.
 * Support testing scenarios based on real-world adversary tactics, techniques, and procedures (TTPs).
 * Apply the MITRE ATT&CK framework to categorize and document adversary techniques.
 * Assist with testing security controls and identifying weaknesses that could lead to unauthorized access or privilege escalation.
 * Document testing procedures, evidence, vulnerabilities, attack paths, and results.
 * Develop clear technical findings describing vulnerabilities, risk, evidence, and recommended remediation.
 * Retest identified vulnerabilities following remediation.
 * Maintain knowledge of emerging vulnerabilities, exploits, attack techniques, and defensive technologies.
 * Follow FSA rules of engagement, security requirements, and testing procedures.