Penetration Testing Lead

Peraton•,

6d•$104,000 - $166,000•Remote

About The Position

Peraton is seeking a Penetration Testing Lead to provide technical leadership for offensive security assessments. The role leads and executes comprehensive penetration tests to identify and validate security vulnerabilities across applications, infrastructure, networks, AWS cloud environments, and systems. It also develops testing strategies and methodologies and oversees the delivery of high-quality assessments aligned with industry best practices and organizational risk-management objectives. The position is remote, with required availability during 8 a.m.–5 p.m. Eastern Time.

Requirements

Must be a U.S. citizen and able to obtain and maintain the required Public Trust clearance.
A bachelor’s degree and 12 years of experience, a master’s degree and 10 years, an associate degree and 14 years, or a high school diploma or equivalent and 16 years.
At least one of the following certifications: OSCP, OSCE, GXPN, or CEH.
Demonstrated experience conducting penetration testing across network infrastructure, web applications, APIs, and AWS cloud environments.
Experience planning and executing red team exercises, adversary emulation, and attack simulations.
Working knowledge of NIST SP 800-115, MITRE ATT&CK, and DHS RVA standards.
Experience configuring, maintaining, and optimizing penetration testing tools, frameworks, and automated security validation platforms.
Ability to identify and validate vulnerabilities, assess risk and potential business impact, and communicate actionable remediation recommendations.
Experience mentoring junior penetration testers and promoting adherence to testing methodologies and security best practices.
Strong analytical, problem-solving, and technical documentation skills, including the ability to explain complex security findings clearly.

Nice To Haves

Experience with automated penetration testing and security validation platforms such as Pentera, Cymulate, Picus Security, Intruder, or similar.

Responsibilities

Lead and execute penetration tests across network infrastructure, applications, APIs, and AWS cloud environments.
Plan and conduct red team exercises that simulate real-world adversary tactics, techniques, and procedures and evaluate detection and response capabilities.
Apply testing methodologies and standards including NIST SP 800-115, MITRE ATT&CK, and DHS Risk and Vulnerability Assessment (RVA) standards.
Analyze test results, validate findings, assess business impact, and provide actionable, risk-based remediation recommendations.
Maintain, configure, and optimize penetration testing tools, frameworks, and supporting technologies.
Collaborate with security, cloud, application development, and infrastructure teams to communicate findings, support remediation, and improve security posture.
Mentor junior penetration testers and provide technical guidance.
Evaluate emerging attack techniques, vulnerabilities, and offensive security tools to enhance testing capabilities and address evolving threats.

Benefits

Medical, dental, and vision benefits.
Life insurance.
Health savings account.
Short- and long-term disability.
Employee Assistance Program (EAP).
Parental leave.
401(k).
Paid time off for vacation.
Company-paid holidays.
Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus.