Penetration Tester

Koniag Government Services

. Perform penetration testing on networks, web applications, mobile applications, and infrastructure .

Posted 10/17/2026full-timeUnited StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing, vulnerability assessments, and ethical hacking, with proficiency in scripting for automation and a strong understanding of security frameworks and compliance standards. Capable of collaborating with technical teams to remediate vulnerabilities and present findings effectively.

Highest-signal resume keywords

Penetration TestingVulnerability AssessmentScripting Languages (Python, Bash, PowerShell)Metasploit, Burp Suite, Nmap, Wireshark, Kali LinuxOSCP, GPEN, CEH, CISSP Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingVulnerability AssessmentScripting Languages (Python, Bash, PowerShell)Network SecurityWeb Application SecurityWireless Penetration TestingEncryption MechanismsAuthentication MechanismsAccess Control MechanismsCloud Security Assessments

Soft Skills

CollaborationCommunicationPresentation SkillsAnalytical ThinkingProblem-Solving

Tools & Technologies

MetasploitBurp SuiteNmapWiresharkKali Linux

Certifications & Qualifications

OSCPGPENCEHCISSP

Industry Keywords

OWASP Top 10MITRE ATT&CKCVSS ScoringNIST 800-53FedRAMPRMFRed Team OperationsAdversary Emulation TechniquesSecure Coding PracticesSAST/DAST

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformKubernetesLinuxPython

About the role

Key responsibilities & impact

Perform penetration testing on networks, web applications, mobile applications, and infrastructure
Conduct vulnerability assessments and exploit identified vulnerabilities in a controlled, authorized manner
Develop and execute test plans covering reconnaissance, scanning, exploitation, and post-exploitation
Use industry-standard tools and techniques to assess system security
Write custom scripts and tools to automate testing and exploit development
Document findings in detailed technical reports with risk ratings, exploitation methods, and remediation recommendations
Present findings and recommendations to technical teams and leadership
Collaborate with system administrators, developers, and security teams to validate and remediate vulnerabilities
Conduct social engineering assessments, including phishing campaigns, when required
Stay current on emerging threats, attack vectors, and penetration testing methodologies
Participate in red team/blue team exercises and support purple team collaboration
Ensure testing complies with rules of engagement, legal requirements, and organizational policies
Support continuous monitoring and enterprise-wide security assessment efforts

Requirements

What you’ll need

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field from an accredited college or university; equivalent experience may be considered in lieu of a degree
3-5 years of experience in penetration testing, ethical hacking, or offensive security roles
Demonstrated experience conducting network, web application, and/or wireless penetration tests
Experience with scripting languages such as Python, Bash, or PowerShell for tool development and automation
Strong understanding of networking protocols, Windows, Linux, and system architectures
Hands-on experience with Metasploit, Burp Suite, Nmap, Wireshark, and Kali Linux
Knowledge of OWASP Top 10, MITRE ATT&CK, and CVSS scoring
Experience conducting internal and external penetration tests
Strong understanding of encryption, authentication, and access control mechanisms
Ability to obtain and maintain a Public Trust Clearance
Experience working in a federal government IT environment supporting security assessments is desired
OSCP, GPEN, CEH, or CISSP certifications are desired
Experience with cloud security assessments for AWS, Azure, or GCP is desired
Familiarity with red team operations and adversary emulation techniques is desired
Knowledge of secure coding practices and SAST/DAST is desired
Experience with container and Kubernetes security testing is desired
Familiarity with NIST 800-53, FedRAMP, or RMF is desired

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
401(k) retirement plan
Paid time off
Paid parental leave
Life insurance
Disability insurance
Flexible spending accounts
Commuter benefits
Tuition reimbursement