Senior Penetration Testing Engineer

Concurrent Technologies Corporation•Washington DC Metro Area, DC

4d•Onsite

About The Position

Concurrent Technologies Corporation (CTC) is seeking a highly experienced Senior Penetration Testing Engineer (Key Personnel) to support a mission-critical Department of Defense cybersecurity program. The selected candidate will serve as a senior technical Subject Matter Expert (SME), leading advanced penetration testing, vulnerability assessments, software assurance activities, and secure systems engineering efforts across complex classified environments. The ideal candidate possesses extensive experience identifying, analyzing, and mitigating cybersecurity risks across enterprise networks, cloud environments, cross-domain solutions (CDS), and mission-critical systems. This individual will collaborate closely with government stakeholders, engineers, and cybersecurity teams to improve system resilience while ensuring compliance with DoD cybersecurity requirements and best practices.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical discipline. Equivalent professional experience may be considered.
10+ years of overall cybersecurity, information assurance, or cyber engineering experience.
At least 2 years of recent hands-on experience in each of the following areas: Software Assurance, Penetration Testing, Vulnerability Assessment, Patch Management, Secure Cloud Technologies, Cross Domain Solutions (CDS)
Demonstrated experience performing penetration testing using industry-standard methodologies and tools.
Strong understanding of network security, operating systems, application security, and cybersecurity architectures.
Experience preparing technical assessment reports and presenting findings to technical and executive stakeholders.
Excellent analytical, troubleshooting, and communication skills.
Certified Ethical Hacker (CEH)
Certified Information Systems Security Professional (CISSP)

Nice To Haves

Experience supporting Department of Defense or Intelligence Community cybersecurity programs.
Familiarity with NIST Risk Management Framework (RMF), NIST 800-53, DISA STIGs, and DoD cybersecurity policies.
Experience supporting classified cloud environments.
Knowledge of secure software development practices and DevSecOps methodologies.
Experience with automated vulnerability management and enterprise security assessment tools.
Ability to lead technical teams and interface directly with Government leadership.

Responsibilities

Lead and perform advanced penetration testing against enterprise applications, operating systems, networks, and cloud-hosted environments.
Conduct comprehensive vulnerability assessments and provide technical recommendations for remediation and risk reduction.
Evaluate software security throughout the Software Development Lifecycle (SDLC), ensuring secure coding practices and software assurance methodologies are implemented.
Assess and validate secure cloud architectures, configurations, and security controls.
Support Cross Domain Solution (CDS) security assessments, testing, and accreditation activities.
Develop technical reports documenting findings, exploit paths, risk assessments, and recommended corrective actions.
Validate vulnerability remediation efforts through retesting and verification activities.
Support patch management strategies by identifying security deficiencies and verifying remediation effectiveness.
Collaborate with system engineers, software developers, ISSOs, and government personnel to strengthen overall cybersecurity posture.
Provide technical guidance on emerging cyber threats, attack methodologies, and defensive countermeasures.
Assist with cybersecurity engineering efforts supporting Risk Management Framework (RMF) compliance and continuous monitoring initiatives.
Mentor junior cybersecurity personnel and provide subject matter expertise during technical reviews and assessments.