Penetration Tester, Mid

Booz Allen Hamilton•San Antonio, TX

45d•$61,900 - $141,000

About The Position

The Opportunity: As a cyber professional, you understand that identifying adversary tactics, techniques, and procedures is essential to producing the intelligence that drives mission success. At Booz Allen, you can apply your skills and experience to shape strategies and help mitigate the most urgent cyber vulnerabilities. Here, you aren’t just interpreting reports, you’re telling the story that informs some of our nation’s most far-reaching cybersecurity decisions. As a cyber threat specialist on our team, you’ll be trusted to help clients solve complex challenges using advanced tools such as Advana, Splunk, Carbon Black, Tenable, and various EDR platforms. Through penetration testing, vulnerability assessments, risk evaluations, and continuous threat monitoring, you’ll collaborate with multiple stakeholders to identify vulnerabilities and deliver meaningful, actionable recommendations. You’ll help monitor security environments and uncover gaps by viewing systems through the mindset of an adversary. In this role, you’ll make direct impact by monitoring network environments for emerging threats, analyzing integrated Validated Online Lifecycle Threat (VOLT) reports alongside all-source intelligence, and supporting damage assessment activities to understand adversary capabilities and intent. Booz Allen is committed to creating an environment where your cyber career can grow — with dedicated mentoring, access to cutting-edge resources, and opportunities to earn in-demand certifications that enhance your expertise. With missions across both the public and private sectors and roles available in multiple geographies, your career path is limited only by your ambition. Work with us to secure the systems, networks, and critical infrastructures that matter most. Join us. The world can’t wait.

Requirements

2+ years of experience with cyber penetration testing or developing risk and threat mitigation plans
2+ years of experience operating in Linux, Windows, and virtual platforms
2+ years of experience with computer attack methods and system exploitation techniques
2+ years of experience leveraging adversarial tactics to conduct hands-on security testing
2+ years of experience performing network security analysis, including software or traffic analysis
TS/SCI clearance
HS diploma or GED
DoD 8140 baseline Certification such as Security+, CySA+, CISSP, or DoD Cyber Workforce Framework Certification

Nice To Haves

Experience with manually auditing source code, including Java, Ruby, Python, JavaScript, Rust, or C, to find security issues
Experience with tools, tactics, and techniques targeting Cloud services and their ecosystems
Experience with Cloud and DevSecOps
Possession of excellent verbal and written communication skills

Responsibilities

monitoring network environments for emerging threats
analyzing integrated Validated Online Lifecycle Threat (VOLT) reports alongside all-source intelligence
supporting damage assessment activities to understand adversary capabilities and intent