Penetration Tester - TS/SCI with Polygraph

General Dynamics Information Technology • McLean, VA

8d • $168,141 - $227,485 • Onsite

About The Position

GDIT is hiring a Penetration Tester to support customer activities as part of a highly skilled cybersecurity team. The role contributes to cybersecurity risk management services and helps ensure operational IT capabilities deliver timely, accurate, and secure information. The position is onsite at the customer location in McLean, Virginia, and requires an active TS/SCI clearance with polygraph and U.S. citizenship.

The Penetration Tester conducts security assessments across networks, web applications, databases, and cloud services; analyzes scanner and static code analysis results; identifies vulnerabilities and compliance issues; and develops threat-based reports and security recommendations. The role also involves coordinating with technical teams and senior government stakeholders and producing assessment documentation and procedures.

The position requires a bachelor's degree in a relevant computing, engineering, information systems, information technology, or cybersecurity discipline, plus at least eight years of related experience. Experience with NIST 800-53 and the Risk Management Framework is required. GDIT lists CEH or CPT certifications, strong writing skills, and AWS and Azure cloud security experience as desired qualifications. The expected salary range is $168,141–$227,485; actual compensation may vary based on experience, location, and contractual requirements.

Requirements

• Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline.
• At least 8 years of related experience.
• Currently possess a TS/SCI clearance with polygraph.
• U.S. citizenship is required.
• Experience with NIST 800-53 and the Risk Management Framework.

Nice To Haves

• CEH (Certified Ethical Hacker) certification.
• CPT (Certified Penetration Tester) certification.
• Strong writing skills.
• Experience with AWS and Azure cloud security.

Responsibilities

• Conduct internal and external penetration testing of networks, web applications, databases, and cloud services.
• Manually exploit and compromise networks, web applications, databases, and cloud services, including privilege escalation and lateral movement.
• Examine results from web and operating-system scanners, scans, and static source code analysis.
• Identify vulnerabilities, misconfigurations, and compliance issues.
• Write final reports and defend findings, including the risk or vulnerability, mitigation strategies, and references.
• Meet and coordinate with developers, system administrators, project managers, and senior government stakeholders.
• Provide security recommendations to developers, system administrators, project managers, and senior government stakeholders.
• Report vulnerabilities identified during security assessments.
• Write penetration testing Rules of Engagement (RoE), test plans, and Standard Operating Procedures (SOPs).
• Produce actionable, threat-based reports on security testing results.
• Conduct security reviews and technical research, and provide reporting to increase security defense mechanisms.

Benefits

• 401(k) with company match.
• Comprehensive health and wellness packages, including medical plan options and dental and vision plans.
• Professional growth opportunities, including paid education and certifications.
• Paid vacation and holidays.
• Flexible work weeks where possible.
• Paid time off plans that include vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
• Short- and long-term disability benefits.
• Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior