Red Team Tester

SkyePoint Decisions, Inc.

. Support authorized red team and penetration testing engagements across FSA systems, networks, applications, APIs, and cloud environments .

Posted 11/12/2026full-timeRemote • District of Columbia • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in penetration testing, vulnerability assessment, and security testing across various environments, utilizing the MITRE ATT&CK framework to identify and document vulnerabilities and remediation strategies. Possesses strong analytical and communication skills to effectively convey technical findings and recommendations.

Highest-signal resume keywords

Penetration TestingVulnerability AssessmentMITRE ATT&CK FrameworkBurp SuiteNmap

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityVulnerability ExploitationNetwork ProtocolsWeb TechnologiesScripting (Python, PowerShell, Bash)Security TestingEthical HackingAttack-Path AnalysisPost-Exploitation ActivitiesCloud Security Testing

Soft Skills

Analytical SkillsTroubleshooting SkillsCommunication Skills

Tools & Technologies

MetasploitKali LinuxWiresharkNessus/TenableBloodHoundAWS

Certifications & Qualifications

Security+CEHEJPTPNPTOSCP

Industry Keywords

FSA Rules of EngagementNIST SP 800-115Adversary TacticsTechniques and Procedures (TTPs)Unauthorized AccessPrivilege Escalation

Tech Stack

Tools & technologies

AWSCloudCyber SecurityLinuxPython

About the role

Key responsibilities & impact

Support authorized red team and penetration testing engagements across FSA systems, networks, applications, APIs, and cloud environments
Conduct vulnerability validation and exploitation activities under established rules of engagement
Assist with reconnaissance, enumeration, attack-path analysis, exploitation, and post-exploitation activities
Perform web application, network, API, and infrastructure security testing
Support testing scenarios based on real-world adversary tactics, techniques, and procedures (TTPs)
Apply the MITRE ATT&CK framework to categorize and document adversary techniques
Assist with testing security controls and identifying weaknesses that could lead to unauthorized access or privilege escalation
Document testing procedures, evidence, vulnerabilities, attack paths, and results
Develop clear technical findings describing vulnerabilities, risk, evidence, and recommended remediation
Retest identified vulnerabilities following remediation
Maintain knowledge of emerging vulnerabilities, exploits, attack techniques, and defensive technologies
Follow FSA rules of engagement, security requirements, and testing procedures

Requirements

What you’ll need

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or related discipline, or equivalent applicable experience
3 to 5 years work experience in the subject area
Possess an industry professional certification
Hands-on cybersecurity experience involving penetration testing, vulnerability assessment, security testing, ethical hacking, or related activities
Working knowledge of network protocols, operating systems, web technologies, and common security vulnerabilities
Familiarity with penetration-testing methodology and vulnerability exploitation
Understanding of the MITRE ATT&CK framework and common attacker TTPs
Ability to clearly document technical findings and remediation recommendations
Strong analytical, troubleshooting, and communication skills
Must be able to obtain a Public Trust
Must be a U.S. citizen
Preferred: Experience with Burp Suite, Nmap, Metasploit, Kali Linux, Wireshark, Nessus/Tenable, BloodHound, or comparable offensive security tools
Preferred: Familiarity with Windows and Linux environments
Preferred: Exposure to AWS cloud security testing
Preferred: Familiarity with NIST SP 800-115
Preferred: Scripting experience using Python, PowerShell, Bash, or similar technologies
Preferred: Relevant certification such as Security+, CEH, eJPT, PNPT, or OSCP

Benefits

Comp & perks

Certification incentive program
PTO
Floating federal holiday options
HMO insurance plans
High Deductible health plans with Health Savings Accounts (HSAs)
Flex Spending Accounts (FSAs)
Full Dental Plans
Vision insurance
Short-term and long-term disability insurance
Life Insurance
401k match
Flexible Work Environment