Pen Tester

Chimes • Baltimore, MD

5d • $56 - $79 • Remote

About The Position

Chimes is seeking a Penetration Tester to evaluate the security of authorized systems, applications, networks, devices, and facilities. This is a remote position open to candidates in the United States. Candidates must be legally authorized to work in the U.S.; Chimes does not provide visa sponsorship. AbilityOne Program participants are encouraged to apply, but participation is not required. Chimes provides reasonable accommodations for individuals with disabilities during the application and interview process, in performing essential job functions, and in receiving other employment benefits and privileges.

The role plans and conducts authorized penetration tests, vulnerability assessments, and adversarial simulations within approved rules of engagement. It identifies and validates security weaknesses using approved tools and manual techniques, researches threats and testing methods, documents findings and recommended corrective actions, communicates risks and remediation options to stakeholders, and retests corrected findings.

Base salary depends on the candidate’s work location, skills, experience, and internal equity. The listed hourly ranges are $64.45–$78.77 for Tier 1 (Washington, DC and Northern Virginia), $59.79–$73.07 for Tier 2 (Baltimore, MD), $57.36–$70.66 for Tier 3 (New Castle, DE and Dallas, TX), and $56.09–$68.45 for Tier 4 (Orlando, FL).

Requirements

• Three or more years performing authorized penetration testing, vulnerability assessment, security research, or related work.
• Experience testing networks, applications, operating systems, or endpoint devices using approved tools and manual techniques.
• Experience preparing technical findings and presenting remediation recommendations to varied audiences.
• Legally authorized to work in the United States.

Nice To Haves

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• A recognized penetration-testing, ethical-hacking, or offensive-security certification.
• Experience in government, regulated, or security-conscious environments.
• Degrees and certifications in computer science, data science, or related fields are preferred; equivalent education and experience are welcome.
• Equivalent combinations of related education, training, and experience may be considered.

Responsibilities

• Plan and conduct authorized penetration tests, vulnerability assessments, and adversarial simulations within approved rules of engagement.
• Safely identify and validate weaknesses in networks, applications, operating systems, devices, configurations, and physical-security controls using approved tools and manual techniques; assess attack paths, privilege escalation, and potential data exposure.
• Research current threat tactics, techniques, vulnerabilities, and defensive countermeasures, and evaluate testing tools and techniques before approved operational use.
• Document test scope, methods, evidence, affected assets, severity, and recommended corrective actions; prepare technical reports and executive summaries that accurately communicate findings and risk.
• Brief system owners, technical teams, and leadership on findings and remediation options; retest corrected findings and document closure evidence or residual risk.

Benefits

• Medical plan starting at $13.80 per month; the Minimum Value Health Plan costs $6.90 per pay period.
• Employer-paid life insurance and AD&D.
• Employer-provided long-term disability coverage.
• 403(b) retirement plan with employer match.
• 10 paid holidays and generous PTO.
• Tickets at Work.
• Employee referral bonuses and recognition programs.
• Clear pathways for growth and advancement.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed