Pen Tester

Chimes • Baltimore, MD

4d • Remote

About The Position

Chimes is seeking a Penetration Tester to evaluate the security of authorized systems, applications, networks, devices, and facilities. This is a remote role open to candidates located in the United States. Candidates must be legally authorized to work in the U.S.; Chimes does not provide visa sponsorship. AbilityOne Program participation is encouraged but not required. Chimes provides reasonable accommodations for individuals with disabilities during the application and interview process, in performing essential job functions, and in receiving other employment benefits and privileges.

The role plans and conducts authorized penetration tests, vulnerability assessments, and adversarial simulations within approved rules of engagement. It identifies and validates security weaknesses using approved tools and manual techniques, researches current threats and testing approaches, documents and reports findings, briefs stakeholders on remediation options, and retests corrected findings.

Base salary depends on work location, skills, experience, and internal equity. The listed hourly ranges are: Tier 1 (Washington, DC and Northern Virginia), $64.45–$78.77; Tier 2 (Baltimore, MD), $59.79–$73.07; Tier 3 (New Castle, DE and Dallas, TX), $57.36–$70.66; and Tier 4 (Orlando, FL), $56.09–$68.45.

Requirements

• Three or more years performing authorized penetration testing, vulnerability assessment, security research, or related work.
• Experience testing networks, applications, operating systems, or endpoint devices using approved tools and manual techniques.
• Experience preparing technical findings and presenting remediation recommendations to varied audiences.
• Legally authorized to work in the United States; visa sponsorship is not provided.

Nice To Haves

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field preferred; equivalent combinations of related education, training, and experience may be considered.
• A recognized penetration-testing, ethical-hacking, or offensive-security certification preferred.
• Experience in government, regulated, or security-conscious environments preferred.
• Degrees and certifications in computer science, data science, or related fields are preferred; equivalent education and experience are welcome.

Responsibilities

• Plan and conduct authorized penetration tests, vulnerability assessments, and adversarial simulations within approved rules of engagement.
• Safely identify and validate weaknesses in networks, applications, operating systems, devices, configurations, and physical-security controls using approved tools and manual techniques.
• Assess attack paths, privilege escalation, and potential data exposure.
• Research current threat tactics, techniques, vulnerabilities, and defensive countermeasures.
• Evaluate testing tools and techniques before approved operational use.
• Document test scope, methods, evidence, affected assets, severity, and recommended corrective actions.
• Prepare technical reports and executive summaries that accurately communicate findings and risk.
• Brief system owners, technical teams, and leadership on findings and remediation options.
• Retest corrected findings and document closure evidence or residual risk.

Benefits

• Medical plan starting at $13.80 per month; the stated $6.90 is per pay period for the Minimum Value Health Plan.
• Employer-paid life insurance and AD&D.
• Employer-provided long-term disability coverage.
• 403(b) retirement plan with employer match.
• 10 paid holidays and generous PTO.
• Tickets at Work.
• Employee referral bonuses and recognition programs.
• Clear pathways for growth and advancement.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level