Find Your Dream Career

Candidates are encouraged to apply as soon as possible. Koniag Operations Services, a Koniag Government Services company, is seeking a skilled and detail-oriented Penetration Tester to join our cybersecurity team supporting critical security assessment initiatives for KOS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust. This position is Hybrid. Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits, and tuition reimbursement. The ideal candidate is a motivated security professional with a strong technical background and ethical mindset, possessing the ability to apply their offensive security skills and analytical expertise to identify vulnerabilities, assess risks, and strengthen the security posture of complex systems and networks. The Penetration Tester will conduct authorized simulated attacks on systems, networks, and applications to identify security vulnerabilities before malicious actors can exploit them. Principal Responsibilities Will Include But Are Not Limited To Perform penetration testing on networks, web applications, mobile applications, and infrastructure to identify security weaknesses. Conduct vulnerability assessments and exploit identified vulnerabilities in a controlled, authorized manner. Develop and execute test plans, including reconnaissance, scanning, exploitation, and post-exploitation activities. Utilize industry-standard tools and techniques (e.g., Metasploit, Burp Suite, Nmap, Nessus) to assess system security. Write custom scripts and tools to automate testing processes and exploit development as needed. Document findings in detailed technical reports, including risk ratings, exploitation methods, and remediation recommendations. Present findings and recommendations to technical teams and leadership in a clear, actionable manner. Collaborate with system administrators, developers, and security teams to validate and remediate identified vulnerabilities. Conduct social engineering assessments, including phishing campaigns, when required. Stay current on emerging threats, attack vectors, and penetration testing methodologies. Participate in red team/blue team exercises and support purple team collaboration efforts. Ensure all testing activities comply with rules of engagement, legal requirements, and organizational policies. Support continuous monitoring and security assessment efforts across the enterprise. Required Education and Experience: Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field from an accredited college or university; equivalent experience may be considered in lieu of a degree. 3-5 years of experience in penetration testing, ethical hacking, or offensive security roles. Demonstrated experience conducting network, web application, and/or wireless penetration tests. Experience with scripting languages (e.g., Python, Bash, PowerShell) for tool development and automation. Required Skills And Competencies Exceptional communication skills – both written and oral – with the ability to translate complex technical findings into actionable business recommendations for both technical and non-technical stakeholders. Strong understanding of networking protocols, operating systems (Windows, Linux), and system architectures. Hands-on experience with penetration testing tools, including Metasploit, Burp Suite, Nmap, Wireshark, and Kali Linux. Knowledge of common vulnerability frameworks, including OWASP Top 10, MITRE ATT&CK, and CVSS scoring. Experience conducting both internal and external penetration tests. Ability to think creatively and adopt an attacker's mindset to identify non-obvious security weaknesses. Strong understanding of security concepts, including encryption, authentication, and access control mechanisms. Ability to work independently and manage multiple engagements under tight deadlines. Strong report writing skills with attention to detail and accuracy. Ability to obtain and maintain a Public Trust Clearance. Desired Skills And Competencies Experience working in a federal government IT environment supporting security assessments. Industry certifications such as OSCP, GPEN, CEH, or CISSP. Experience with cloud security assessments (AWS, Azure, GCP). Familiarity with red team operations and adversary emulation techniques. Knowledge of secure coding practices and application security testing (SAST/DAST). Experience with container and Kubernetes security testing. Familiarity with compliance frameworks such as NIST 800-53, FedRAMP, or RMF. Our Equal Employment Opportunity Policy The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment. The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations. Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com. Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352

Purpose and Impact: Are you interested in using your skills to help shape the Cyber, Security, & Intel space? If so, look no further. We are seeking a Penetration Tester 3 to join our team of passionate individuals on our Prime contract. In this role you will support challenging, mission-critical projects that make a direct impact on the nation's security and intelligence mission. Essential Responsibilities: Serve as a Subject Matter Expert providing testing expertise of the Risk Management Framework. Direct and/or participate in the testing phase of security controls assessments using specialized knowledge of network protocols, operating systems, architectures, equipment, services, and standards. Perform vulnerability and penetration testing using a wide variety of tools Research and evaluate emerging technologies relevant to information systems security; interpret agency specific and federal security regulations Perform both network and application-level testing using established testing protocols and Methods Perform vulnerability and penetration testing using a wide variety of tools Research and evaluate emerging technologies relevant to information systems security; interpret agency specific and federal security regulations Perform both network and application-level testing using established testing protocols and methods Clearance Required: TS/SCI Poly Minimum Education: A Bachelor's degree in Computer Science, Information Technology Engineering, or related field. In lieu of a Bachelor's degree, an additional four (4) years of experience for a total of twelve (12) years. undefined Minimum Years of Experience: Eight (8) experience of related work experience as a Penetration Tester performing both network and application-level testing using established test protocols and methods. A Bachelor's degree in Computer Science or a related field (e.g. General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cybersecurity, Information Technology, Information Assurance, Information Security, and Information Systems). In lieu of a Bachelor's degree, four (4) additional years of Penetration Testing experience may be substituted for a total of twelve (12) years of experience. Required Certifications: DoD 8570 compliance with IAT III is required – CASP+CE (now SecurityX), CCNP Security, CISA, GCED, GCIH, CCSP, CISSP (or Associate) #javelin This position is not designated as a safety sensitive position. As part of our commitment to maintaining a safe and compliant work environment, Amentum is a drug-free workplace and requires all personnel to comply with company drug and alcohol policies as a condition of employment. Employment is contingent upon successful completion of the drug screening process. Please note that this may include pre-hire screening for marijuana, as well as other federally controlled substances due to Amentum's role as a federal contractor and trusted partner to the US Government. Other Responsibilities: Safety Amentum enforces a safety culture whereby all employees have the responsibility for continuously developing and maintaining a safe work environment. As appropriate, each employee is responsible for completing all training requirements and fulfilling all self-aid/buddy aid responsibilities, participating in emergency response tasks and serving on safety committees and teams. Quality Quality is the foundation for the management of our business and the keystone to our goal of customer satisfaction. It is our policy to consistently provide services that meet customer expectations. Accordingly, each employee must conform to the Amentum Quality Policy and carry out job activities in compliance with applicable Amentum Quality System documents and customer contracts. Each employee must read and understand his/her Quality Management and Customer Satisfaction responsibilities. Procedure Compliance Each employee must read, understand and implement the general and specific operational, safety, quality and environmental requirements of all plans, procedures and policies pertaining to his/her job. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Compensation Details: $175,000 - $212,000 The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws. Benefits Overview: Our health and welfare benefits are designed to support you and your priorities. Offerings include: Health, dental, and vision insurance Paid time off and holidays Retirement benefits (including 401(k) matching) Educational reimbursement Parental leave Employee stock purchase plan Tax-saving options Disability and life insurance Pet insurance Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits. Original Posting: 10/20/2026 - Until Filled Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs. Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.

DoD 8570 compliance with IAT III is required Due to federal contract requirements, United States citizenship and an active TS/SCI security clearance and polygraph are required for the position. Required: Must be a US Citizen Must have TS/SCI clearance w/ active polygraph Eight (08) experience of related work experience as a Penetration Tester performing both network and application-level testing using established test protocols and methods. Bachelor's degree in Computer Science or a related field (e.g. General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cybersecurity, Information Technology, Information Assurance, Information Security, and Information Systems). In lieu of a Bachelor's degree, an additional four (04) years of experience for a total of twelve (12) years experience. Serve as a Subject Matter Expert providing testing expertise of the Risk Management Framework. Direct and/or participate in the testing phase of security controls assessments using specialized knowledge of network protocols, operating systems, architectures, equipment, services, and standards. Perform vulnerability and penetration testing using a wide variety of tools Research and evaluate emerging technologies relevant to information systems security; interpret agency specific and federal security regulations Perform both network and application-level testing using established testing protocols and methods DoD 8570 compliance with IAT III is required. The benefits package: Affordable healthcare options with 80% employer paid premium PLUS a company-funded HSA Comprehensive Dental insurance Vision with 80% employer paid premium Employer paid Life insurance 100% Employer paid Short-term and Long-term disability 100% Annual training, continued education, and professional memberships reimbursement Unlimited access to Red Hat Enterprise Linux and AWS training and accreditation Annual reimbursement for technology i.e. phones, computers, printers, etc. 401(k) with company match up to 5% with 100% immediate vesting (after 90 days of employment) The environment and perks: Professional development investment and paid time off for training Contract and work locations in Maryland, Virginia, Colorado, Texas, Utah, Florida and Hawaii. Team building events throughout the year such as Destination Family Events, Holiday Party, Monthly Get-Togethers Leadership Team engagement and mentorship Performance Recognition Program Complimentary branded apparel Don't see a job opening that's the perfect fit? Apply to our General Position to join our talent pool for consideration for future opportunities. Know someone else who may be a good fit? Refer them through the CTI External Referral Program and you could receive a one-time referral bonus of up to $10,000 ! Email cti-staffing@cti-md.com for more information. Constellation Technologies is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, religion, creed, color, national origin, ancestry, sex (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, medical condition, marital or domestic partner status, sexual orientation, gender, gender identity, gender expression and transgender status, mental disability or physical disability, genetic information, military or veteran status, citizenship, low-income status or any other status or characteristic protected by applicable law. Job applicants can submit questions about CTI's equal employment opportunity policy to cti-hr@cti-md.com. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us. The pay range for this job, with multi-levels, is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Vibrint is a trusted provider of mission-critical systems and analysis that transform our customers' capacity and capability in harvesting and harnessing data. Working alongside many of the most talented professionals in public service, we work tirelessly to create and sustain new solutions and services that meet the stringent demands across a variety of customer missions. Our people know they'll be doing work that matters at the heart of the national security mission, exploring new possibilities at the cutting edge of technology. They know they will be well-rewarded and recognized for their commitment. Our people know they will enjoy plentiful opportunities to grow, thrive, and have fun as a member of the Vibrint family. Join Vibrint, where your career is a priority, and your future is our shared goal. _ We are seeking a highly skilled and proactive Penetration Testing SME to join our Cybersecurity team. As a Penetration Testing SME, you will play a critical role in protecting our clients' infrastructure and data by identifying, testing, and validating security weaknesses across networks, systems, applications, and cloud environments. You will work closely with security engineers, incident responders, system owners, and other stakeholders to assess risk, recommend remediation strategies, and strengthen overall defensive posture. This role also requires the ability to train, mentor, and upskill analysts and team members in penetration testing methodologies, offensive security techniques, and adversary tradecraft. Required Skills The candidate shall be able to: Conduct advanced penetration testing across enterprise and government environments, including network, web application, wireless, and internal/external assessments Perform authorized exploitation and post-exploitation activities to validate risk and demonstrate real-world attack impact Develop and execute penetration testing methodologies, tactics, techniques, and procedures aligned with industry best practices Analyze security architectures, configurations, and controls to identify gaps and provide actionable remediation recommendations Produce clear, comprehensive technical reports and executive summaries outlining findings, risk, and mitigation strategies Collaborate with blue teams, incident responders, system owners, and developers to improve security posture and validate remediation efforts Stay current on adversary tactics, emerging vulnerabilities, and offensive security trends to continuously enhance testing capabilities Provide technical leadership and oversight for penetration testing activities across the team Train, mentor, and develop junior analysts through hands-on instruction, workshops, and knowledge-sharing sessions Guide team members on offensive tools, methodologies, reporting standards, and operational best practices Desired Skills Advanced Penetration Testing Expertise: Proven experience leading and conducting complex penetration tests in enterprise or federal environments, including adversary emulation, red team-style assessments, and validation of security controls against advanced threats Technical Proficiency in Offensive Security Tooling: Hands-on experience with tools such as Kali Linux, Metasploit, Burp Suite Pro, Cobalt Strike, Nmap, Nessus, BloodHound, Impacket, and other offensive security platforms used for enumeration, exploitation, and reporting Training and Mentorship Experience: Demonstrated ability to train analysts and junior personnel in penetration testing concepts, offensive tooling, attack lifecycle methodology, and reporting standards Application and Infrastructure Security Knowledge: Strong understanding of web application security, Active Directory exploitation, privilege escalation, lateral movement, cloud security testing, and common attack vectors affecting modern enterprise environments Analytical and Collaborative Mindset: Strong ability to analyze complex environments, simulate realistic attack scenarios, and work closely with defenders, engineers, and leadership to improve security controls and reduce organizational risk Qualifications 10+ years of experience in penetration testing, red teaming, or offensive cybersecurity operations Hands-on experience using industry-standard penetration testing and vulnerability assessment tools (e.g., Burp Suite, Metasploit, Nmap, Nessus, BloodHound, etc.) Demonstrated experience conducting exploitation, privilege escalation, and lateral movement in authorized environments Experience training, mentoring, or leading analysts in cybersecurity or offensive security disciplines Strong understanding of common cyber threats, attack vectors, and adversary tactics (MITRE ATT&CK, etc.) Bachelor's degree in computer science, Cybersecurity, or related field (or equivalent experience) Relevant certifications such as OSCP, OSCE, GPEN, GXPN, CISSP, or GIAC preferred Active Top-Secret Clearance (SCI Eligible) preferred The pay range for this position is a general guideline only and not a guarantee of compensation or salary. Our approach to crafting offers considers various factors to provide an equitable and competitive comprehensive compensation package. These considerations include, but are not limited to, contracted rates, education, certification(s), experience, specific competencies required for this position, and geographic location. Vibrint's comprehensive compensation package includes but is not limited to: competitive salary; annual merit-based salary increase and discretionary bonus program; 401(k) plan with a company contribution; 11 paid federal holidays; 160 hours of paid time off; medical, dental, vision, life and short- & long-term disability insurance; employee assistance program; and a generous professional development allowance. #nocj

Position Summary Odyssey is seeking an SE‑4 Cybersecurity Penetration Tester to support the 48th Cyberspace Test Squadron (48 CTS), TGEC, under the TMAS III contract. This position is located at Peterson Space Force Base, CO, and supports cybersecurity penetration testing, compliance testing, and vulnerability analysis for Air Force and Space Force systems. The Penetration Tester will work in a fast‑paced, multi‑disciplinary environment and conduct hands‑on testing to identify and characterize system vulnerabilities across a wide range of technologies. This is a full‑time position at Peterson SFB, CO, with 25% CONUS/OCONUS travel required to meet 48 CTS mission needs. Responsibilities Duties to include, but not limited to: Lead and conduct independent penetration testing, data collection, test automation, and reporting Develop test tools and strategies tailored for DoD cybersecurity assessments Perform system security analysis to identify vulnerabilities and exploitation techniques across software and hardware systems Execute hands‑on testing across multiple operating systems (Windows, Linux, UNIX) and software/databases (SQL Server, Oracle, Apache, etc.) Provide technical guidance and mentorship to penetration test teams Document and communicate test results for both technical and non‑technical audiences Manage, plan, and provide direction for CVI, ACD, CVPA, and AA cyber test teams Interface with DoD Program Offices to scope, plan, execute, and report penetration test activities Qualifications Citizenship: Must be a US citizen Minimum Required Qualifications Clearance: Active Secret required; must be able to obtain and maintain a Top Secret clearance Education: Master's degree in cybersecurity, computer engineering, computer science, IT systems, or related technical discipline AND at least 10 years of relevant experience Additional experience may substitute for degree Certifications: Must obtain DoD 8570 IAT Level III certification (CASP, CISSP, ISSEP, etc.) within 6 months of hire and maintain certification Experience with penetration testing tools and methods Experience exploiting web applications Strong analytical, communication, and technical documentation skills Ability to work independently and on cross‑functional teams Preferred Qualifications Clearance : Top Secret Certifications: Advanced cybersecurity certifications (CISSP, CASP, OSCP, OSEP, OSWE, GPEN, GWAP, etc.) Experience leading penetration testing teams and events Knowledge of source code vulnerability analysis Knowledge of wired and wireless network protocols Experience with interpreted and compiled programming languages Technical Skills Experience using modern penetration testing tools and methods Experience testing and exploiting web applications Strong analytical and problem‑solving skills Knowledge of Windows and Linux OS environments, including Kali Ability to execute exploitation across networks, web applications, OS, and embedded systems Experience with CVI, CVPA, ACD, and AA test methodologies Knowledge of scripting/interpreted languages (Python, Ruby, JavaScript, Bash, PowerShell, PHP) — preferred Knowledge of compiled languages (C, C++, Assembly, Java) — preferred Knowledge of source code vulnerability analysis — preferred Understanding of network security, network protocol structures (wired and wireless), and system exploitation Interpersonal Skills Strong organization and decision‑making abilities Excellent verbal and written communication skills Ability to work independently with minimal supervision Ability to work effectively in both small and large team environments Ability to engage collaboratively with DoD program offices and technical teams Additional Information Location: Peterson Space Force Base, CO Work Environment: Onsite Job Status: Full‑Time Travel: 25% CONUS / OCONUS TDYs #TMAS3 #CTG Company Overview Odyssey is a world-class technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. Odyssey meets the military's operational needs by integrating layered defense systems from equipment, technology, and services to data, information, and business operations. We streamline defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality. Odyssey is dedicated to excellent contract execution, peak organizational performance, and fostering a workplace built on employee care. Odyssey is proud to live out our core values of commitment, ambition, and respect in our work and communities through OdysseyCares , a philanthropic group focused on giving back through direct donations, an employer match program, and volunteering events. Please note : Final compensation for this position will be determined by various factors such as the Federal Government contract labor categories and contract wage rates, relevant work experience, specific skills and competencies, geographic location, education, and certifications.

SIXGEN's mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Red Team Operator Job Type: Full Time Location: On-site 1x/week in Washington DC Clearance Requirements: None, but Public Trust preferred Travel: None ABOUT THE TEAM SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. You'll work with our highly skilled operators conducting research and assessments based on real-world threats. You'll simulate adversaries and malicious actors and report details and actionable findings on critical assets and infrastructures. Using innovative processes, tools, and techniques, you'll predict and overcome cybersecurity vulnerabilities. Your successes will be supported by our diverse team of experienced, technical talent. WHAT YOU'LL DO Simulate real-world cyberattacks to assess and challenge the effectiveness of security controls and incident response capabilities. Conduct reconnaissance, exploitation, and post-exploitation activities using adversary tactics, techniques, and procedures (TTPs). Develop and use custom tools and methods to evade detection and maintain stealth during engagements. Collaborate with blue and purple teams to improve detection, response, and overall security posture. Document findings and deliver clear, actionable reports to technical and executive stakeholders. REQUIRED QUALIFICATIONS US Citizen with the ability to obtain a Public Trust clearance. CRTO certification (or ability to earn within 3 months of hire). OSCP and/or GPEN certifications. Technical experience (4+ years each): Hands on red team operations or government computer network exploitation/tactical operations. Using penetration testing and red teaming frameworks (e.g., Cobalt Strike, Kali) in production environments. Working with network technologies and protocols (OSI model, routing, network building/troubleshooting). Applying and investigating "living off the land" tactics, techniques, and procedures (TTPs). Scripting and programming (e.g., Bash, C#, Ruby, Perl, Python, PHP). Social engineering and physical security penetration testing. Writing clear, detailed cybersecurity assessment reports. Ability to secure, configure, deploy, and troubleshoot major operating systems (Windows, Linux/Unimax, macOS). COMPENSATION & BENEFITS Salary Range: $115,000 - $120,000 The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. The final salary offer will be determined after a thorough review of the candidate's background and alignment with the role. Additionally, SIXGEN offers top-tier benefits for full-time employees, including: Employer-paid health insurance premiums (medical, dental, vision) for you and your family Employer-paid short/long term disability insurance and basic life/AD&D insurance 401K with a 4% employer contribution Professional development reimbursement options available (training, certification, education, etc) Flexible and remote work policies for most positions Flexible PTO and holiday schedule OUR COMMITMENT SIXGEN is an Equal Opportunity Employer. We ensure that all applicants are considered for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, age, marital status, ancestry, projected veteran status, or any other protected group or class. We are committed to fostering an inclusive culture that values diversity in our people, reflecting the communities we serve and our customer base. We strive to attract and retain a diverse talent pool and create an environment where everyone is empowered to be their authentic selves at work.

Overview Join Cloud Operations + Innovation (CO+I), the organization behind the technology and infrastructure that powers Microsoft's cloud. Within CO+I, the Trusted Cyber Engineering (TCE) team is at the forefront of ensuring the security of our global operations. We are seeking a highly skilled security engineer to join our team dedicated to driving cutting-edge security innovation. You will test physical and logical security systems that keep Microsoft's global datacenter running, from cloud services and networks to hardware and operational technology for critical infrastructure such as power, cooling, and building management systems. As part of our team, you'll provide guidance on team priorities, tactics, and methodologies. You will educate, empower, and inspire fellow cyber defenders, peers, and strategic partners. Our focus is collaboration as we perform penetration testing and ensure a high rate of issue resolution working very closely with our partners. You will be a direct hands-on individual contributor and a technical lead for our penetration testing function with the ability to help shape the team and team's strategy as we continue to mature our penetration testing team's capability and growth. While there is a preference for candidates who can work from our Redmond, WA office three days per week, we welcome qualified candidates who may not be able to meet this preference. Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. Responsibilities Leads and participates in comprehensive penetration testing efforts across all layers of services including applications, cloud, network, hardware and critical infrastructure operational technology (OT) systems. Identifies security vulnerabilities, performs end-to-end adversary emulation within approved rules of engagement for multiple areas of responsibility with an ability to come up to speed on new targets and unidentified patterns without direction. Operates in uncertain, challenging, and novel environments and execute offensive and defensive security operations. Identifies unknown risk areas and leverages expertise to appropriately handle them. Builds relationships to enable streamlined and efficient communication and collaboration, advocating for security change across the organization. Provides strategic guidance to teams on priorities, tactics, evaluation strategies, and development of methodologies. Chains findings into attack paths that demonstrate operational and business impact. Organizes and directs the team focused on engagement rules, scoping, executive risk communications and technical guidance for operations. Leads the rhythm of business across team to ensure remediation of findings is completed according to the defined SLA; reporting and all communications are delivered on time. Creates high-quality executive level verbal and written presentations advocating for and outlining process of penetration testing, explaining technical information to non-technical audiences, as well as present data driven reporting tracking operations, explaining impact, risks, vulnerabilities, system information and remediation plans with potential impact. Works as a technical operator on various types of penetration testing offerings with an ability to identify and exploit misconfigurations, improve detection capabilities, and enhance threat visibility. Research emerging threats, vulnerabilities, and tools to stay updated with the latest attack techniques, and security trends Mentors and guide team members and partners, fostering a culture of curiosity, collaboration, and technical excellence. Partners closely with detection, threat intelligence and incident response teams to turn findings into actionable detections. Applies AI and automation to scale reconnaissance, discovery and testing. Qualifications Required Qualifications: Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 4+ years' experience in security or related field OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years' experience in security or related field OR equivalent experience. Other Requirements Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter. Citizenship & Citizenship Verification: This position requires verification of citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local government agency customers and is subject to certain citizenship-based restrictions where required or permitted by applicable law. To meet this legal requirement, and as a condition of employment, the successful candidate's citizenship will be verified with a valid passport. While not required, we also look for the following Preferred Qualifications: 6+ years of experience in identifying security vulnerabilities, software development lifecycle, large-scale computing, modeling, cyber security, and anomaly detection 6+ years of experience with coding or scripting in languages such as C#, Python, C++, Go, PowerShell, .NET, Rust, or other comparable programming languages Familiarity with security standards and frameworks like OWASP, MITRE ATT&CK, and NIST. 3+ years of experience leading a penetration testing team including hiring, mentoring and managing full time and vendor engineers. Relevant offensive security certifications such as OffSec OSCP, OSEP/OSCE³, GPEN, GXPN, or similar; OT/ICS certifications (e.g., GICSP, GRID) Experience utilizing open-source and open-weight Large Language Models (LLMs), and chunking, embeddings and RAG techniques. Expertise developing KQL queries, data models, anomaly detection, correlation analytics, statistical analysis. Deep understanding of Azure; AWS, or GCP experience. Knowledge of operational technology (OT) and Industrial Control Systems (ICS) security. Effective organizational and technical program management skills as well as demonstrated skills for conveying complex concepts to diverse audiences. Proficiency with Power BI and Azure DevOps for reporting and tracking #COICareers Penetration Testing IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Job Summary Minimum 3+ years of experience in conducting penetration testing and vulnerability assessments. Experience testing web applications, APIs, networks, and cloud environments. Hands-on experience with industry-standard security testing tools and exploit frameworks. Experience identifying, validating, and documenting security vulnerabilities. Exposure to secure coding practices and application security concepts. Experience preparing security assessment reports and presenting findings to stakeholders. Understanding of cybersecurity threats, attack methodologies, and defense mechanisms. Relevant certifications such as CEH, OSCP, GPEN, and PNPT are preferred. Web Application Penetration Testing (OWASP Top 10) API Security Testing and Network Penetration Testing, Vulnerability Assessment & Management Cloud Security Testing (AWS/Azure/GCP) Mobile Application Security Testing (Android/iOS) Active Directory Security Assessment Security Risk Assessment and Threat Analysis Burp Suite Professional, OWASP ZAP, Metasploit Nessus, Qualys, Nmap, Wireshark Kali Linux and Security Toolsets Python, PowerShell, Bash/Shell Scripting Understanding of Security Frameworks (OWASP, PTES, NIST) Security Reporting and Remediation Recommendations Knowledge of Compliance Standards (ISO 27001, PCI-DSS, SOC2) • Ability to assess prompt injection, insecure model/application interactions, sensitive information exposure, excessive agency and other LLM application risks • Ability to identify attack surfaces across models, data, applications, APIs, RAG pipelines and agents using frameworks such as MITRE ATLAS • Ability to use approved LLM/AI tools for test-case generation, reconnaissance analysis, vulnerability analysis, scripting and report generation Roles and Responsibilities: • Uses AI/GenAI to accelerate penetration-testing activities, such as reconnaissance, test-case generation, analysis, scripting, and reporting. • Conduct security testing of web applications, APIs, networks, cloud environments, and systems. • Identify, validate, and document security vulnerabilities and weaknesses. • Perform controlled exploitation to assess the impact and risk of vulnerabilities. • Execute vulnerability assessments using manual and automated testing tools. • Prepare detailed security assessment reports with remediation recommendations. • Collaborate with development and infrastructure teams to resolve security issues. • Conduct security reviews to ensure compliance with organizational and industry standards. • Support secure software development and security best practices Work Authorization Applicants must be legally authorized to work in the United States. Equal Employment Opportunity Themesoft Inc is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.

Job Title: Cyber Monitoring Analyst Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI Employee Type: Regular Percentage of Travel Required: Up to 10% Type of Travel: Local The Opportunity Our client is seeking a highly motivated Cyber Monitoring Analyst that will join the Cyber Security Incident Response Team supporting the AF DCGS program located onsite at Langley AFB, Va. The ideal candidate will have intermediate-level skills in Windows, Linux, and Cloud environments, supported by a background in system administration or security monitoring. They should be experienced in using SIEMs or other cyber monitoring tools for real-time threat detection and log analysis. In addition, the candidate must be capable of executing monitoring and escalation procedures in alignment with the established Incident Response Plan (IRP), with minimal oversight. This position is embedded within a high-tempo operational environment and demands a proactive approach to monitoring, alert triage, and escalation. Candidates must be comfortable working independently during shift rotations and contributing to a shift-based 24/7 monitoring environment, including weekends and holidays. Shift: Swings/Night 1600-0200 (Wednesday - Saturday) Responsibilities Continuously monitor security alerts and system logs to identify potential threats and anomalous activity across the OA DCGS weapon system, ensuring its confidentiality, integrity, and availability. Utilize ELK/Elastic Stack to conduct real-time log analysis, detect threats, and support investigations; maintain dashboards and incident records for visibility and reporting. Escalate and document security events using established ticketing systems, ensuring timely and accurate reporting to internal cyber analyst tiers (T1–T3) and appropriate external stakeholders beyond the Incident Response (IR) team. Follow and maintain cybersecurity standard operating procedures (SOPs) and incident response playbooks to ensure consistent and effective monitoring practices. Maintain detailed documentation of monitoring activities, incident timelines, and case notes to support post-incident reviews and compliance requirements. Contribute to proactive threat detection by reviewing SIEM alerts and security dashboards to identify indicators of compromise (IOCs) and anomalous activity, supporting early escalation through behavioral analysis and correlation techniques. Monitor threat intelligence feeds and security news for emerging threats, including Zero-Day vulnerabilities and CVEs, and escalate relevant findings to senior analysts for integration into detection workflows. Collaborate with incident response, threat hunting, and vulnerability management teams to ensure seamless handoff and resolution of detected threats. Operate independently during assigned shifts, responding to alerts with urgency and precision to minimize potential impact. Support penetration testing evaluations by responding to simulated threats in real time, enabling measurement of key performance indicators (KPIs) such as Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) Qualifications Required: Active Top Secret/SCI security clearance. Bachelor's degree in IT Technology, Computer Science, or related field with 5 years of experience in cyber operations or monitoring. Degree may be substituted with equivalent experience. DOD 8140 (8570) IAT Level II (Security+ or equivalent). Deep understanding of the Incident Response lifecycle, especially in detection and escalation phases. Proficiency in Elastic Stack (Elasticsearch, Logstash, Kibana) for log analysis. Familiarity with cyber security tools and monitoring procedures Excellent problem-solving and analytical skills to identify and respond to threats in real time. Effective written and verbal communication skills for documentation and collaboration Ability to work independently in a shift-based 24/7 monitoring environment, including weekends and holidays. Desired Experience supporting AF DCGS systems or similar military ISR platforms. Proficiency in using the Elastic Stack (Elasticsearch, Logstash, Kibana) Experience with AWS or other cloud security platforms What You Can Expect A culture of integrity. At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose – to ensure the safety of our nation. An environment of trust. CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality. A focus on continuous growth. Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy. Pay Range There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. The Proposed Salary Range For This Position Is $75,200-$158,100 CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.

AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test & Evaluation, Engineering & Analysis, and Training. Responsibilities As the SOC Analyst II, you will provide tier II cybersecurity support in a Security Operations Center "SOC" environment. Daily responsibilities of the SOC are ever changing, however, you can expect to regularly conduct vulnerability assessments, analyze cyber threats, monitor the email gateway and create reports on all confirmed or suspicious activities. You will work closely with the Tier I and other Tier II personnel to effectively and efficiently provide optimum service to our customers as well as assist with training SOC Analyst I team members when needed. Additionally, in this position you will: Use intrusion detection technologies to apply techniques for identifying host and network-based intrusions. Create, update, and resolve incident tickets that have been tasked to Tier II and appropriately document all alerts and incidents in the ticketing system. Review asset discovery and vulnerability assessment data. Lead incidents from alert to resolution: Leverage emerging threat intelligence (Indicators of Compromise, updated rules, etc.) to identify affected systems and the scope of the attack. Review and collect asset data (logs, configurations, running processes, ) on these systems for further investigation. Determine and direct remediation and recovery efforts including tasking of IHT1 as needed. Determine and request engineering, forensics, or threat intelligencesupport. Inform and brief status of incidents to CSOC manager, CISO, DCIO, or CIO. May manage and configure security monitoring tools (SIEM, IDS, Firewall, Access Control Lists, etc.) to mitigate existing threats / vulnerabilities. Interface and take guidance from the CSOC manager (government position). Review trouble tickets generated by Tier 1. Review threat intel and create notifications and share with specified personnel. Handle other tasks that tier II level of experience and talent can complete. Design incident response for cloud service models. Perform damage assessments. Preserve evidence integrity according to standard operating procedures or national standards. Protect networks against (e.g., NIPS, anti-malware, restrict/prevent external devices, spam filters). Recognize and categorize types of vulnerabilities and associated attacks. Secure network communications. Use security event correlation Tools. Identify, capture, contain, and report malware. Utilize the SOC standard operating procedures (SOP) to perform daily tasks, resolve incidents and preserve evidence integrity. May provide input for and assist with updating procedures. Qualifications As a requirement of this position, all candidates must be a U.S. Citizen in accordance with 8 U.S.C. 1324b(a)(2)(C) . Must hold an active Dept. of War Top Secret Clearance. At least three (3) years of professional experience in incident detection and response, malware analysis, or cyber forensics and a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field. Hold at least one certification as required by DoD 8570.01-M and DoD Directive 8140.01, IAT Level II or higher. Must hold at least one of the following additional certifications: CompTIA CASP+, GIAC GCIH, Microsoft AZ-500, Microsoft SC-200, Splunk Core Certified Advanced Power User Must have extensive experience working with various security methodologies, standard operating procedures, processes, and workflows. Experience configuring and implementing various technical security solutions, extensive experience providing analysis and trending of security log data from a large number of heterogeneous security devices. Experience with some or all of the following is required: Computer networking concepts, OSI model, and network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services, and network security Host/network access control mechanisms (e.g., access control list, capabilities lists). network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth). Network traffic analysis methods and packet-level Cyber threats and vulnerabilities; cyber-attack stages, classes of attacks and attackers; cyber defense and information security policies, procedures, and Incident response and handling methodologies, incident categories, and timelines for Intrusion detection methodologies and techniques for detecting host and network-based intrusions. Malware analysis concepts and cloud service models and how those models can limit incident Application Security Risks (e.g. Open Web Application Security Project Top 10 list) System administration, network, and operating system hardening techniques as well as data backup and System and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code). Experience with the following: JIRA (Atlassian issue tracking system), Palo Alto Firewall, SNORT IDS, AlienVault SIEM, Barracuda Mail Spam / Virus Firewall, and HBSS. This team operates in a 24/7 shift environment. 1 st , 2 nd and 3 rd shifts run Monday – Thursday or Friday – Monday, are 10 hours per day and rotate every 3 months. Pay Transparency Statement AMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $39.00/Hr. - USD $44/Hr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance. EEO Statement EEO Race/Sex/Disability Status/Veteran Status

Katten is a full-service law firm with approximately 650 attorneys in locations across the United States and in London and Shanghai. Clients seeking sophisticated, high-value legal services turn to Katten for counsel locally, nationally and internationally. The firm's core areas of practice include corporate, financial markets and funds, restructuring, intellectual property, litigation, real estate, structured finance and securitization, transactional tax planning, private credit and private wealth. Katten represents public and private companies in numerous industries, as well as a number of government and nonprofit organizations and individuals. Information Security Analyst Reporting to the Information Security Manager, the Information Security Analyst monitors, investigates, and responds to security events across the organization while helping improve threat detection, incident response, and data protection capabilities. The Analyst independently investigates security concerns, identifies emerging threats, and recommends practical enhancements to strengthen the Firm's security posture. Maintains professionalism and strict confidentiality in all client and Firm matters. The Information Security Analyst can be located in our Chicago, Charlotte, Dallas, New York, Los Angeles or Washington D.C. office. Katten offers a hybrid work model, allowing the flexibility to work both on-site and remotely on a regular basis (KattenFlex). Essential Duties and Responsibilities include, but may not be limited to, the following. Other duties may be requested and/or assigned. Regular and predictable attendance is an essential function of the position. Essential functions are primary job duties that an individual must be able to perform successfully with or without a reasonable accommodation. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Analyze security logs and correlate data from multiple sources to identify suspicious or anomalous activity. Conduct proactive threat hunting and identify indicators of compromise before they develop into larger incidents. Investigate DLP, endpoint, XDR/EDR, and Zscaler alerts, documenting findings and escalating issues as appropriate. Support incident response activities, including evidence collection, analysis, containment, remediation, and post-incident review. Collaborate with IT, infrastructure, application, and business stakeholders on investigations and risk mitigation efforts. Assist in developing and enhancing detection rules, alerts, monitoring processes, and security controls. Maintain awareness of emerging threats, vulnerabilities, and relevant attack techniques. Knowledge, Skills and Abilities Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or a related field, and two (2) to four (4) years of experience in cybersecurity, security operations, incident response, or a related field; or an equivalent combination of education and experience. Relevant certifications such as Security+, GCIH, or similar security certifications preferred. Experience investigating security alerts, suspicious activity, and potential security incidents. Experience with the following: SIEM, XDR/EDR, endpoint security, DLP, network security, or similar technologies. A ticketing or case-management platform such as ServiceNow. Zscaler, Microsoft Defender, LogRhythm, Trend Micro Vision One, or comparable security platforms. Working with an MSSP or Security Operations Center. DLP investigations, data protection controls, and detection-rule development. Familiarity with threat-hunting methodologies and the MITRE ATT&CK framework. Ability to work independently, manage multiple investigations, and communicate technical findings to technical and non-technical audiences. Excellent interpersonal, verbal, and written communication skills with the ability to communicate with courtesy and diplomacy and efficiently follow written and verbal instructions. Excellent organizational skills including record keeping, data collection, and system information. Ability to compile and analyze data and furnish information in report format, written correspondence, e mail, or verbally. Ability to identify and analyze complex issues and problems and to recommend and implement solutions. Work occasionally requires more than 35 hours per week to perform the essential duties of the position. Occasional travel to other Firm locations may be required. In our Los Angeles office, the annualized salary range for this position is $95,000 to $110,000. Actual pay will be adjusted based on experience and other job-related factors permitted by law. We offer an outstanding benefit package which includes: medical/dental/vision, 401k with employer contribution, parental leave, transportation fringe benefit program, back-up care option, generous paid time off policy and long-term and short-term disability policies. Katten Muchin Rosenman LLP in an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Who We Are ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a "work hard, play hard" mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community. The Perks As recognized members of the Cyber Elite, we work together in partnership to defend our nation's critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual's technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more. Who We're Looking For We are seeking a Junior Security Operations Center (SOC) Analyst (Q clearance) to monitor security events, investigate incidents, and support containment and remediation activities. The ideal candidate will combine foundational cybersecurity knowledge with strong analytical skills to support real-time security operations. The Junior SOC Analyst role contributes directly to threat detection, incident response, and security monitoring efforts across the enterprise. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market. What You'll Be Doing Monitor security systems and triage alerts. Investigate security incidents and document findings. Coordinate with other teams to contain and eradicate threats. Conduct post-incident analysis and assist in reporting. Support continuous improvement of monitoring and detection processes. What You Need To Know Strong understanding of foundational network and system security concepts. Proficiency using cybersecurity tools and platforms. Ability to analyze alerts, logs, and system behavior to identify suspicious activity. Strong analytical and problem-solving skills. High attention to detail. Must Have's Bachelor's degree. 1+ years of relevant experience. Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking. Must have the ability to work shifts on a rotating basis for 24/7 support of clients. Travel up to 15%, on average, based on the work you do and the clients and industries/sectors you serve. Applicants must hold and maintain an active DOE Q clearance or equivalent DoD Top Secret clearance.. Beneficial To Have The Following Industry-recognized cybersecurity certifications. Where It's Done Onsite (Las Vegas, NV).