Red Team Penetration Tester

Booz Allen Hamilton•Dahlgren, VA

9d•$86,800 - $198,000

About The Position

The Red Team Penetration Tester helps safeguard U.S. Navy computer systems, applications, servers, and networks. The role supports on-site and remote security assessments by developing detailed test and assessment plans and carrying out attack stages such as footprinting and scanning, enumeration, gaining access, privilege escalation, maintaining access, network exploitation, and covering tracks using one or more Tactics, Techniques, and Procedures (TTPs). The position uses vulnerability scans, compliance checks, and configuration data—including Group Policy Objects (GPOs) and Windows Software Update Service (WSUS)—to identify discrepancies between system documentation and applied security controls. It also performs packet-level analysis with tools such as Wireshark and tcpdump to detect anomalous or malicious network behavior. The tester uses automated tools to conduct penetration tests across networks, applications, web applications, servers, endpoints, wireless systems, and mobile technologies. The role also performs physical security testing, attempting to circumvent locks, badge readers, and other controls to gain unauthorized access to specific hosts. Travel of up to 25% is required.

Requirements

At least 5 years of experience in software engineering applied to program development, and modeling and simulation applied to DoD or IT systems.
Experience with penetration testing, red team operations, tool or software development such as exploits and malware, C2, reverse engineering, and bug bounties, and technologies including PHP, ASP, SQL databases, Java, HTML, or NoSQL.
Knowledge of Linux and Windows-based systems.
Knowledge of common penetration-testing tools such as Kali, Metasploit, NMAP, and Cobalt Strike.
Ability to debug and reverse engineer software.
Ability to travel up to 25% of the time.
Top Secret clearance.
High school diploma or GED.
IAT Level II DoD 8570.01 certification.
Ability to obtain one of the listed certifications within 3 months of hire: OSCP, OSCE, OSEE, OSWP, SANS SEC560, SEC542, SEC660, SEC642, or SEC564.

Responsibilities

Develop detailed test and assessment plans for on-site and remote security assessments.
Carry out attack stages including footprinting and scanning, enumeration, gaining access, privilege escalation, maintaining access, network exploitation, and covering tracks using TTPs.
Use vulnerability scans, compliance checks, and configuration data, including GPOs and WSUS, to identify inconsistencies between system documentation and applied security controls.
Perform packet-level analysis using tools such as Wireshark and tcpdump to identify anomalous or malicious network traffic.
Use automated tools to conduct penetration tests of networks, applications, web applications, servers, endpoints, wireless technologies, and mobile technologies.
Conduct physical security testing by attempting to circumvent locks, badge readers, and other physical security controls.