Enterprise Cybersecurity Penetration Tester and Operator, Mid

Booz Allen Hamilton•McLean, VA

About The Position

As a member of the Booz Allen internal Red Team, you'll lead enterprise and system-focused network and penetration assessments to identify security risks within applications, security controls, and network infrastructure. This is a fast-paced environment that combines offensive security expertise with consulting skills to deliver security analysis and provide solutions to Booz Allen's Enterprise Technology Services and Solutions team. On our team, you’ll plan and execute end-to-end red and purple team scenarios to highlight gaps impacting the organization's security posture using established rules of engagement. You’ll perform penetration testing, including internet, intranet, wireless, mobile devices and applications, and web applications. You’ll convey complex technical security concepts to technical and non-technical stakeholders, including executives. Join a team of security enthusiasts that perform security cutting edge research pertinent to the company, and promote an environment of innovation and knowledge sharing. Due to the nature of work performed within this facility, U.S. citizenship is required.

Requirements

1+ years of experience with penetration testing and red teaming, or cybersecurity
Experience with vulnerability enumeration and exploitation frameworks, including Burp Suite Pro and Metasploit
Knowledge of functionality and capabilities of network defense technologies, including incident response, web application firewalls, SIEM, and EDR solutions
Ability to write high-quality assessment reports and effectively communicate with clients, teammates, and senior leadership
Bachelor's degree in Information Security or CS
U.S. citizenship is required

Nice To Haves

Experience testing cloud-hosted solutions
Experience with red teaming, including covert computer network exploitation
Knowledge of Active Directory, Azure, and Amazon Web Services
Knowledge of programming languages such as Python or Golang
Ability to operate in a fast-paced work environment, multitask, and handle truncated delivery deadlines
Possession of excellent verbal and written communication skills
OSCP Certification

Responsibilities

Lead enterprise and system-focused network and penetration assessments to identify security risks within applications, security controls, and network infrastructure.
Plan and execute end-to-end red and purple team scenarios to highlight gaps impacting the organization's security posture using established rules of engagement.
Perform penetration testing, including internet, intranet, wireless, mobile devices and applications, and web applications.
Convey complex technical security concepts to technical and non-technical stakeholders, including executives.
Perform security cutting edge research pertinent to the company.
Promote an environment of innovation and knowledge sharing.