Penetration Tester / Ethical Hacker
On-siteFort Meade, Maryland, United States
Job Summary
Conduct network, web application, and system penetration tests using industry-standard methodologies to identify exploitable vulnerabilities. Simulate real-world attack scenarios across on-premise infrastructure, cloud platforms, APIs, and applications to evaluate security defenses. Analyze weaknesses such as misconfigurations, insecure code, and access control flaws while mapping attack paths and identifying lateral movement opportunities. Clearly articulate attack scenarios and prioritize findings based on severity and organizational risk. Deliver actionable remediation recommendations and collaborate with development and security teams to support fixes, including retesting and validation. Requires 2–5 years of offensive security experience and certifications like OSCP or CEH.
Required Qualifications
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)
- 2–5 years of experience in penetration testing, ethical hacking, or offensive security
- Hands-on experience with tools such as: Burp Suite, Metasploit, Nmap, Wireshark, OWASP ZAP
- Strong understanding of: Networking protocols and architectures, Web application security (OWASP Top 10), Operating systems (Windows, Linux)
Desired Qualifications
- Experience with cloud security testing (AWS, Azure, GCP)
- Knowledge of secure coding practices and application security testing (SAST/DAST)
- Familiarity with Active Directory security and privilege escalation techniques
- Relevant certifications such as: CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.