Secret Intermediate Penetration Tester

Job Description

Insight Global is seeking a Penetration Tester / Cyber Exploitation Engineer to support a defense client in Aberdeen, MD. This individual will be responsible for conducting advanced penetration testing, vulnerability assessments, and threat hunting activities across a variety of systems, applications, networks, and embedded devices. The ideal candidate will have experience performing grey-box and black-box testing, identifying and exploiting vulnerabilities, and assessing the security posture of mission-critical environments. This role requires strong expertise in offensive cyber operations, Linux-based systems, networking protocols, and modern exploitation techniques, while supporting the development of security recommendations and proof-of-concept demonstrations. An active Secret clearance with the ability to obtain a TS/SCI is required.

$40/hr to $65/hr.

Exact compensation may vary based on several factors, including skills, experience, and education.

Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.

Skills and Requirements

Active Secret Security Clearance with the ability to obtain a TS/SCI Bachelor's degree in a related field and 5+ years of relevant experience Professional experience in penetration testing, offensive cyber operations, or threat hunting Proven experience performing grey-box and black-box penetration testing Strong understanding of OWASP Top 10, DoD, NSA, and industry-standard penetration testing methodologies Experience using penetration testing tools such as Nmap, Wireshark, Burp Suite, Nessus, and similar utilities Extensive knowledge of Linux operating systems Experience with exploitation techniques including buffer overflows, fuzzing, SQL injection, XSS, privilege escalation, lateral movement, Man-in-the-Middle attacks, covert channels, and secure tunneling Strong understanding of networking, TCP/IP, virtualization, and web services Familiarity with hardware analysis, including disassembling devices and identifying hardware components 2-3+ years of hands-on exploitation experience Active TS/SCI Security Clearance Industry certifications such as OSCP, OSCE, GPEN, GWAPT, GXPN, CEH, or CISSP Experience with malware analysis and digital forensics Scripting experience with Bash, Python, Perl, Ruby, or similar languages Systems programming experience Knowledge of Android operating systems and mobile security Experience supporting unmanned systems (UAS/UxS) or related technologies Understanding of radio systems, RF communications, and wireless protocols Experience analyzing and exploiting embedded devices or IoT technologies Experience developing and presenting proof-of-concept exploits and offensive security demonstrations Strong interest in emerging cyber threats, exploitation techniques, and offensive security tools

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].