Poly

Amentum•Columbia, MD

3d•$175,000 - $212,000

About The Position

Amentum is seeking a Penetration Tester 3 to support a Prime contract and mission-critical projects in the Cyber, Security, and Intelligence space. The position supports the nation’s security and intelligence mission and requires a TS/SCI with Polygraph clearance. The Penetration Tester serves as a subject matter expert in testing under the Risk Management Framework. The role directs and/or participates in security control assessment testing, conducts network- and application-level vulnerability and penetration testing using established protocols and methods, and uses a wide variety of testing tools. The position also researches and evaluates emerging technologies relevant to information systems security and interprets agency-specific and federal security regulations. The role requires a bachelor’s degree in a relevant technical field and eight years of related penetration-testing experience, or qualifying additional experience in lieu of the degree. DoD 8570 IAT III certification compliance is required. The position is not designated as safety-sensitive. Amentum is a drug-free workplace, and employment is contingent upon successful completion of drug screening.

Requirements

Active TS/SCI with Polygraph clearance is required.
Eight years of related work experience as a penetration tester performing network- and application-level testing using established test protocols and methods.
Bachelor’s degree in Computer Science, Information Technology Engineering, or a related field. A bachelor’s degree in a related field such as General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cybersecurity, Information Technology, Information Assurance, Information Security, or Information Systems is also specified.
In lieu of a bachelor’s degree, four additional years of penetration-testing experience may be substituted, for a total of twelve years of experience.
DoD 8570 IAT III compliance through one of the following certifications: CASP+ CE (now SecurityX), CCNP Security, CISA, GCED, GCIH, CCSP, or CISSP (or Associate).
Successful completion of the employment drug-screening process is required.

Responsibilities

Serve as a subject matter expert providing testing expertise in the Risk Management Framework.
Direct and/or participate in the testing phase of security controls assessments, applying specialized knowledge of network protocols, operating systems, architectures, equipment, services, and standards.
Perform vulnerability and penetration testing using a wide variety of tools.
Perform network- and application-level testing using established testing protocols and methods.
Research and evaluate emerging technologies relevant to information systems security.
Interpret agency-specific and federal security regulations.
Complete applicable safety training and fulfill self-aid/buddy-aid responsibilities; participate in emergency response tasks and safety committees or teams as appropriate.
Carry out job activities in compliance with Amentum’s Quality Policy, applicable Quality System documents, and customer contracts.
Read, understand, and implement applicable operational, safety, quality, and environmental plans, procedures, and policies.