Penetration Tester - TS/SCI with Polygraph

General Dynamics Information Technology • McLean, VA

6d • Onsite

About The Position

GDIT is hiring a Penetration Tester to support customer activities and provide cybersecurity services. The role conducts penetration testing and security assessments across networks, web applications, databases, and cloud services. It includes identifying and validating vulnerabilities, communicating findings to technical and government stakeholders, and producing threat-based reports and security guidance. The position is onsite at the customer location in McLean, Virginia.

Requirements

• Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline.
• At least 8 years of related experience.
• Currently possess a Top Secret SCI clearance with Polygraph.
• U.S. citizenship required.
• Experience with NIST 800-53 and the Risk Management Framework.
• Strong writing skills.

Nice To Haves

• CEH (Certified Ethical Hacker) certification.
• CPT (Certified Penetration Tester) certification.
• Experience with AWS and Azure Cloud Security.

Responsibilities

• Conduct internal and external penetration testing of networks, web applications, databases, and cloud services.
• Manually exploit and compromise systems, including performing privilege escalation and lateral movement.
• Examine results from web and operating system scanners, scans, and static source code analysis.
• Identify vulnerabilities, misconfigurations, and compliance issues.
• Write final reports and defend findings, including risks or vulnerabilities, mitigation strategies, and references.
• Coordinate with developers, system administrators, project managers, and senior government stakeholders.
• Provide security recommendations to developers, system administrators, project managers, and senior government stakeholders.
• Report vulnerabilities identified during security assessments.
• Write penetration testing Rules of Engagements, Test Plans, and Standard Operating Procedures.
• Produce actionable, threat-based reports on security testing results.
• Conduct security reviews and technical research, and provide reporting to strengthen security defense mechanisms.

Benefits

• 401(k) plan with company match.
• Medical plan options, including options with Health Savings Accounts.
• Dental plan options.
• Vision plan.
• Paid education and certifications.
• Paid vacation, holidays, and other paid time off plans, including sick and personal time.
• Paid parental, military, bereavement, and jury duty leave.
• Short- and long-term disability benefits.
• Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior