Red Team Penetration Tester

Booz Allen Hamilton•Usa, VA

2d•$86,800 - $198,000

About The Position

The Red Team Penetration Tester supports security assessments to protect U.S. Navy computer systems, applications, servers, and networks. The role develops detailed plans for onsite and remote assessments and applies attack stages and Tactics, Techniques, and Procedures (TTPs), including footprinting and scanning, enumeration, gaining access, privilege escalation, maintaining access, network exploitation, and covering tracks. The position supports customers by reviewing vulnerability scans, compliance checks, configuration data, Group Policy Objects (GPOs), and Windows Software Update Service (WSUS) data. The tester identifies discrepancies between system documentation—including vendor claims, Risk Management Framework artifacts, CONOPS, systems engineering plans, design specifications, and interface descriptions—and the security controls actually applied to information systems, PIT systems, IT products, or IT services. The role also performs packet-level analysis with tools such as Wireshark and tcp dump to identify anomalous or malicious network traffic. It uses automated tools to test networks, applications, web applications, servers, endpoints, wireless systems, and mobile technologies. Physical security testing may involve attempting to bypass locks, badge readers, and other controls to gain unauthorized access to hosts. Top Secret clearance is required. The position is full-time; the posting does not specify a workplace type.

Requirements

5+ years of experience in software engineering applied to program development and modeling and simulation for DoD or Information Technology systems.
Experience with penetration testing, red team operations, tool or software development (such as exploits and malware), C2, reverse engineering, and bug bounties.
Experience with PHP, ASP, SQL databases, Java, HTML, or NoSQL.
Knowledge of Linux- and Windows-based systems.
Knowledge of common penetration-testing tools such as Kali, Metasploit, NMAP, and Cobalt Strike.
Ability to debug and reverse engineer software.
Top Secret clearance; selected applicants will undergo a security investigation and must meet eligibility requirements for access to classified information.
High school diploma or GED.
IAT Level II certification per DoD 8570.01 or successor.
Ability to obtain one of the listed certifications within 3 months of hire: OSCP, OSCE, OSEE, OSWP, SANS SEC560, SEC542, SEC660, SEC642, or SEC564.

Responsibilities

Develop detailed test and assessment plans for onsite and remote security assessments.
Carry out attack stages using one or more Tactics, Techniques, and Procedures, including footprinting and scanning, enumeration, gaining access, privilege escalation, maintaining access, network exploitation, and covering tracks.
Use vulnerability scans, compliance checks, GPOs, WSUS, and other configuration data to identify inconsistencies between system documentation and applied security controls.
Perform packet-level analysis using tools such as Wireshark and tcp dump to identify anomalous or malicious behavior in network traffic.
Use automated tools to conduct penetration tests of networks, applications, web applications, servers, endpoints, wireless technologies, and mobile technologies.
Perform physical security testing by attempting to circumvent locks, badge readers, and other physical security controls.