Red Team Penetration Tester

Booz Allen Hamilton•Dahlgren, VA

9d•$86,800 - $198,000•Onsite

About The Position

The Red Team Penetration Tester supports the security of U.S. Navy computer systems, applications, servers, and networks by developing detailed test and assessment plans for on-site and remote security assessments and carrying out attack stages using applicable tactics, techniques, and procedures. The role supports customers by using vulnerability scans, compliance checks, and configuration data—including Group Policy Objects and Windows Software Update Service data—to identify discrepancies between system documentation and security controls actually applied to information systems, Platform Information Technology systems, IT products, and IT services. It also involves packet-level analysis to identify anomalous or malicious network traffic. The position uses automated tools to conduct penetration tests of networks, applications, web applications, servers, endpoints, wireless technologies, and mobile technologies. It also performs physical security testing by attempting to circumvent locks, badge readers, and other controls, typically to gain unauthorized access to specific hosts. The role is based in Dahlgren, Virginia, is not listed as remote, and may require travel up to 25% of the time. A Top Secret clearance is required.

Requirements

5+ years of experience in software engineering applied to program development, and modeling and simulation applied to DoD or IT systems.
Experience with penetration testing, red team operations, tool or software development such as exploits and malware, C2, reverse engineering, and bug bounties; and PHP, ASP, SQL databases, Java, HTML, or NoSQL.
Knowledge of Linux and Windows-based systems.
Knowledge of common penetration-testing tools such as Kali, Metasploit, NMAP, and Cobalt Strike.
Ability to debug and reverse engineer software.
Ability to travel up to 25% of the time.
Top Secret clearance.
High school diploma or GED.
IAT Level II DoD 8570.01 certification.
Ability to obtain within three months of hire one of the following certifications: OSCP, OSCE, OSEE, OSWP, SANS SEC560, SEC542, SEC660, SEC642, or SEC564.

Responsibilities

Develop detailed test and assessment plans for on-site and remote security assessments.
Carry out penetration-testing attack stages, including footprinting and scanning, enumeration, gaining access, privilege escalation, maintaining access, network exploitation, and covering tracks using one or more Tactics, Techniques, and Procedures.
Use vulnerability scans, compliance checks, and configuration data, including Group Policy Objects and Windows Software Update Service data, to identify inconsistencies between system documentation and implemented security controls.
Perform packet-level analysis using tools such as Wireshark and tcp dump to identify anomalous or malicious behavior in network traffic flows.
Use automated tools to conduct penetration tests of networks, applications, web applications, servers, endpoints, wireless technologies, and mobile technologies.
Perform physical security testing by attempting to circumvent locks, badge readers, and other physical security controls, typically to gain unauthorized access to specific hosts.