Penetration Testing Engineer

Booz Allen Hamilton•Alexandria, VA

5d•$86,800 - $198,000•Remote

About The Position

As a penetration tester, you'll play a pivotal role in safeguarding our critical digital environments. Your ability to perform penetration testing, vulnerability management, and software and system assurance will ensure the security of computer systems, applications, servers, and networks. In this role, you’ll be instrumental in conducting penetration testing activities such as reverse shell, SQL injections, social engineering, buffer overflows, trojan horses, password cracking tools and techniques, and privilege escalation. You'll also conduct assessments of threats and vulnerabilities, assess risk, and develop and recommend appropriate mitigation countermeasures. This is an opportunity to develop attack vectors, conduct reconnaissance, collect open-source intelligence, enumeration, and foot-printing of target platforms, networks, and services, and develop exploit payloads and system backdoors to identify vulnerabilities or weaknesses. You’ll identify vulnerabilities and provide actionable solutions to enhance the Army National Guard enterprise network.

Requirements

3+ years of experience with cyber penetration testing
Experience developing risk and threat mitigation plans
Experience operating in Linux, Windows, and virtual platforms
Experience with computer attack methods and system exploitation techniques
Experience leveraging adversarial tactics to conduct security testing
Experience performing network security analysis, including software or traffic analysis
Knowledge of functionality and capabilities of network defense technologies, including incident response, web application firewalls, SIEM, and EDR solutions
Top Secret clearance
Bachelor's Degree

Nice To Haves

Experience manually auditing source code, including Java, Ruby, Python, JavaScript, Rust, or C, to find security issues
Knowledge of tools, tactics, and techniques targeting Artificial Intelligence (AI) systems and their ecosystems

Responsibilities

Perform penetration testing, vulnerability management, and software and system assurance.
Conduct penetration testing activities such as reverse shell, SQL injections, social engineering, buffer overflows, trojan horses, password cracking tools and techniques, and privilege escalation.
Conduct assessments of threats and vulnerabilities.
Assess risk and develop and recommend appropriate mitigation countermeasures.
Develop attack vectors, conduct reconnaissance, collect open-source intelligence, enumeration, and foot-printing of target platforms, networks, and services.
Develop exploit payloads and system backdoors to identify vulnerabilities or weaknesses.
Identify vulnerabilities and provide actionable solutions to enhance the Army National Guard enterprise network.