Penetration Tester - TS/SCI with Polygraph

General Dynamics Information Technology•McLean, VA

1d•$122,230 - $165,370•Onsite

About The Position

GDIT is hiring a Penetration Tester to support customer activities as part of a skilled cybersecurity team. The role helps provide cybersecurity risk management services and ensures operational IT capabilities deliver timely, accurate, and secure information. The position is onsite at the customer location in McLean, Virginia, and requires an active TS/SCI clearance with polygraph. The Penetration Tester conducts security assessments across networks, web applications, databases, and cloud services; identifies and reports vulnerabilities, misconfigurations, and compliance issues; and produces actionable, threat-based reports. The role also develops Rules of Engagement, test plans, and standard operating procedures, communicates findings and recommendations to technical teams and government stakeholders, and applies NIST 800-53, NIST 800-115, and Risk Management Framework knowledge. The role requires a bachelor's degree in a specified technical discipline or closely related field and at least six years of related experience. Desired qualifications include CEH or CPT certification, strong writing skills, and AWS cloud security experience. The position is scheduled for 40 hours per week, with less than 10% travel. The stated likely salary range is $122,230–$165,370, subject to experience, location, and contractual requirements.

Requirements

Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline.
At least 6 years of related experience.
Active Top Secret/SCI clearance with polygraph.
U.S. citizenship.
Experience with NIST 800-53, NIST 800-115, and the Risk Management Framework.
Skills in cloud security, cybersecurity risk management, and information security.

Nice To Haves

CEH (Certified Ethical Hacker) certification.
CPT (Certified Penetration Tester) certification.
Strong writing skills.
Experience with AWS cloud security.

Responsibilities

Conduct internal and external penetration testing of networks, web applications, databases, and cloud services.
Manually exploit and compromise systems, including performing privilege escalation and lateral movement.
Identify vulnerabilities, misconfigurations, and compliance issues.
Write final reports that explain findings, risks or vulnerabilities, mitigation strategies, and references, and defend those findings.
Meet and coordinate with developers, system administrators, project managers, and senior government stakeholders.
Provide security recommendations to developers, system administrators, project managers, and senior government stakeholders.
Report vulnerabilities identified during security assessments.
Write penetration testing Rules of Engagement (RoE), test plans, and Standard Operating Procedures (SOPs).
Produce actionable, threat-based reports on security testing results.
Conduct security reviews and technical research, and provide reporting to improve security defense mechanisms.
Apply experience with NIST 800-53 and the Risk Management Framework.

Benefits

401(k) with company match.
Medical plan options, including plans with Health Savings Accounts.
Dental insurance options.
Vision plan.
Paid vacation and holidays.
Paid education and certifications.
Professional growth opportunities and internal career mobility support.
Flexible work weeks where possible.
Sick and personal time, paid parental leave, military leave, bereavement leave, and jury duty leave.
Short- and long-term disability benefits, life insurance, accidental death and dismemberment coverage, personal accident coverage, critical illness coverage, and business travel and accident insurance.