Penetration Tester

SAIC

. Deliver penetration tests across client environments using black box, white box, web application, and mobile methodologies aligned to NIST standards .

Posted 10/5/2026full-timeRemote • Texas • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates advanced technical knowledge in cybersecurity and digital forensics, with proficiency in penetration testing methodologies and tools. Capable of producing detailed technical reports and presenting findings to diverse audiences, while managing engagements and strategic planning effectively.

Highest-signal resume keywords

Penetration TestingOWASP WSTGBurp Suite ProRed-TeamingGWAPT Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityDigital ForensicsVulnerability ManagementMalware Reverse EngineeringCloud Security ArchitectureMobile Application TestingAPI Security TestingSource Code ReviewTechnical Report WritingStrategic Planning

Soft Skills

Client CommunicationConsultative DirectionOrganizational Decision-Making

Tools & Technologies

Burp Suite ProFFUFSQLMapNucleiFridaObjectionMobSFADBCOTS/GOTS ToolsCustom Tools

Certifications & Qualifications

GWAPTOSCPOSWEGWEB

Industry Keywords

NIST StandardsOWASP Top 10CJIS ClearanceEthical HackingNetwork SecurityFirewallsElectronic Data TrafficEmerging VulnerabilitiesAttack TechniquesTechnical Projects

Tech Stack

Tools & technologies

AndroidCloudCyber SecurityFirewallsGraphQLiOSSOAP

About the role

Key responsibilities & impact

Deliver penetration tests across client environments using black box, white box, web application, and mobile methodologies aligned to NIST standards
Independently manage engagements from scoping through reporting while maintaining quality
Produce technical reports describing findings, risk context, and actionable remediation guidance for technical and executive audiences
Support mobile application security assessments for iOS and Android using OWASP MASVS/MSTG
Perform strategic planning and management in cybersecurity and digital forensics aligned with the NICE Framework
Address security issues involving architectures, firewalls, electronic data traffic, and network access
Research, evaluate, and recommend security tools, techniques, and technologies
Use COTS/GOTS and custom tools to scan, identify, contain, mitigate, and remediate vulnerabilities and intrusions
Design, develop, and implement security solutions across enterprise engagements
Present technical findings and business risk to developers, CISOs, and other clients
Act as spokesperson and advisor on advanced technical projects and research
Participate with senior management to establish strategic plans and objectives
Share knowledge, improve internal tooling and methodologies, and help close practice skill gaps
Monitor emerging vulnerabilities, attack techniques, and industry developments

Requirements

What you’ll need

Bachelor’s degree and nine (9) years or more experience; Master’s degree and seven (7) years or more experience; PhD or JD and four (4) years or more related experience
Additional experience considered in lieu of degree
Must be a US Citizen
Must be able to pass a CJIS Criminal Justice background investigation and maintain CJIS clearance throughout employment
Advanced technical knowledge in cybersecurity and digital forensics
Strong working knowledge of OWASP WSTG and OWASP Top 10, including vulnerability discovery and exploitation
Proficiency with Burp Suite Pro, FFUF, SQLMap, and Nuclei
Working familiarity with mobile application testing concepts and tooling, including Frida, Objection, MobSF, and ADB
Proven experience in red-teaming, ethical hacking, and cloud security architecture
Proficiency in malware reverse engineering and enterprise cyber architecture
Strong background in security issues involving architectures, firewalls, electronic data traffic, and network access
Experience researching, evaluating, and recommending security tools and technologies
Proficiency using COTS/GOTS and custom tools for vulnerability management
Ability to write professional, client-ready penetration test reports with minimal revision
GWAPT certification required or strongly preferred; OSCP, OSWE, or GWEB also considered
Preferred: hands-on iOS and/or Android application assessment experience
Preferred: API security testing familiarity with REST, GraphQL, and SOAP
Preferred: source code review exposure in white box engagements
Preferred: experience presenting findings to client stakeholders and senior leadership
Preferred: experience with strategic planning, complex technical problems, consultative direction, advanced technical projects, technological development, and organizational decision-making

Benefits

Comp & perks

Equal Opportunity Employer
Intentional growth opportunities
Opportunity to contribute visibly to client and team outcomes
Knowledge-sharing and internal tooling/methodology improvement opportunities