Penetration Tester (Hybrid)

Candidates are encouraged to apply as soon as possible.

Koniag Operations Services, a Koniag Government Services company, is seeking a skilled and detail-oriented Penetration Tester to join our cybersecurity team supporting critical security assessment initiatives for KOS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust. This position is Hybrid.

Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits, and tuition reimbursement.

The ideal candidate is a motivated security professional with a strong technical background and ethical mindset, possessing the ability to apply their offensive security skills and analytical expertise to identify vulnerabilities, assess risks, and strengthen the security posture of complex systems and networks.

The Penetration Tester will conduct authorized simulated attacks on systems, networks, and applications to identify security vulnerabilities before malicious actors can exploit them.

Principal responsibilities will include but are not limited to:

• Perform penetration testing on networks, web applications, mobile applications, and infrastructure to identify security weaknesses.

• Conduct vulnerability assessments and exploit identified vulnerabilities in a controlled, authorized manner.

• Develop and execute test plans, including reconnaissance, scanning, exploitation, and post-exploitation activities.

• Utilize industry-standard tools and techniques (e.g., Metasploit, Burp Suite, Nmap, Nessus) to assess system security.

• Write custom scripts and tools to automate testing processes and exploit development as needed.

• Document findings in detailed technical reports, including risk ratings, exploitation methods, and remediation recommendations.

• Present findings and recommendations to technical teams and leadership in a clear, actionable manner.

• Collaborate with system administrators, developers, and security teams to validate and remediate identified vulnerabilities.

• Conduct social engineering assessments, including phishing campaigns, when required.

• Stay current on emerging threats, attack vectors, and penetration testing methodologies.

• Participate in red team/blue team exercises and support purple team collaboration efforts.

• Ensure all testing activities comply with rules of engagement, legal requirements, and organizational policies.

• Support continuous monitoring and security assessment efforts across the enterprise.

Education and Experience:

Required:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field from an accredited college or university; equivalent experience may be considered in lieu of a degree.

• 3-5 years of experience in penetration testing, ethical hacking, or offensive security roles.

• Demonstrated experience conducting network, web application, and/or wireless penetration tests.

• Experience with scripting languages (e.g., Python, Bash, PowerShell) for tool development and automation.

Required Skills and Competencies:

• Exceptional communication skills – both written and oral – with the ability to translate complex technical findings into actionable business recommendations for both technical and non-technical stakeholders.

• Strong understanding of networking protocols, operating systems (Windows, Linux), and system architectures.

• Hands-on experience with penetration testing tools, including Metasploit, Burp Suite, Nmap, Wireshark, and Kali Linux.

• Knowledge of common vulnerability frameworks, including OWASP Top 10, MITRE ATT&CK, and CVSS scoring.

• Experience conducting both internal and external penetration tests.

• Ability to think creatively and adopt an attacker's mindset to identify non-obvious security weaknesses.

• Strong understanding of security concepts, including encryption, authentication, and access control mechanisms.

• Ability to work independently and manage multiple engagements under tight deadlines.

• Strong report writing skills with attention to detail and accuracy.

• Ability to obtain and maintain a Public Trust Clearance.

Desired Skills and Competencies:

• Experience working in a federal government IT environment supporting security assessments.

• Industry certifications such as OSCP, GPEN, CEH, or CISSP.

• Experience with cloud security assessments (AWS, Azure, GCP).

• Familiarity with red team operations and adversary emulation techniques.

• Knowledge of secure coding practices and application security testing (SAST/DAST).

• Experience with container and Kubernetes security testing.

• Familiarity with compliance frameworks such as NIST 800-53, FedRAMP, or RMF.

Our Equal Employment Opportunity Policy

The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at [email protected] or by calling 703-488-9377 to request accommodations.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com .

Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352