Feed de empregos ao vivo

Encontre o seu Carreira dos Sonhos

Milhares de oportunidades selecionadas das principais empresas – filtre por função, salário e preferência remota para encontrar a opção perfeita.

Grátis para sempreSem necessidade de cartãoVagas verificadas
73,154+Posições ao vivo
—Empresas
100%Gratuito para aplicar
Atualizado a cada horaVagas Recentes
Rápido:
Navegar:

73,154 empregos

Quality Assurance Engineer II
RF-SMARTJacksonville, United Stateshá 23 dias
Tempo integralNo localMeio
javascripttypescriptplaywrightdevopsagilescrum+5

Quality Assurance Engineer - RF-SMART for NetSuite US East Office (Jacksonville, FL) We exist to transform our customers and change lives Who We're Looking For RF-SMART is seeking a QA Engineer to test enterprise grade software in a fast-paced scrum development team at our US East Office in Jacksonville, FL. The QA Engineer job description encompasses two main roles: testing and documentation. After Software Developers complete their development tasks, Quality Assurance Engineers test them. They use a variety of tools, testing applications and reports to compare the software to user requirements. They ensure that the software functions according to those requirements. After testing, Quality Assurance Engineers recommend changes and improvements for software. They work with developers to make the appropriate changes and then test everything all over again. What You'll Do: Quality Assurance Engineers document the entire quality testing process. They describe the program, evaluation, testing methods, and any improvements made to the software. Because Quality Assurance Engineers work so closely with the software, they often create training materials and instruct users how to use the software properly. The QA Engineer will be responsible for creating an end-to-end test plan, executing the plan, and managing all activities in the plan to ensure that all the objectives are met, and that the solution works as expected. The solution should be tested in terms of functionality, performance, reliability and stability. Developing and executing software test plans Identifying and facilitating issue resolution with functional and technical groups Documenting and communicating test results Testing alongside DevOps initiatives to shift-left in testing approach NetSuite and Supply Chain/Warehousing knowledge would be a big plus What You Bring: BS in Computer Science or related field or equivalent professional experience 3-5 years' experience testing in an Agile environment Strong communication skills and attention to detail Jira and X-ray experience or similar technology Able to run and debug automation tests in JavaScript or TypeScript Able to write automation tests with training Understanding of Playwright, Puppeteer, and/or Jasmine testing frameworks Fast learners and hard workers! Experience with NetSuite and Supply Chain/ Warehousing knowledge, or other WMS systems What To Expect: Initial Call with our Talent Acquisition Team Hiring Manager Interview with Sr QA Manager QA Team Panel Interview Cross Functional Team Panel Interview with Agile Delivery Specialist, Developers, Product Owner Executive Interview with AVP of Product Engineering Why You'll Love It Here: Working at RF-SMART means joining a culture that values growth, collaboration, and innovation. As a Quality Assurance Engineer II, you'll work alongside a passionate team dedicated to making a difference—both for our customers and our employees. Employer does not sponsor applicants for employment visa status (e.g. H-1B visa status). General Information: The above noted job description is not intended to be an exhaustive list of all duties and responsibilities that may be assigned, but rather to give a general sense of the responsibilities and expectations of the job. As the nature of business demands change so, too, may the essential functions of this specific position and/or the skills and abilities required. RF-SMART is an Equal Employment Opportunity (EEO) employer. A Word From Our CEO - Watch Now

Ver trabalho
Quality Engineer I
AbbottSan Diego, United Stateshá 21 dias
Tempo integralNo localJúnior$81,500 - $141,300 / Year
sqlrestagilescrumarchitectureca

Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 122,000 colleagues serve people in more than 160 countries. At Abbott Cancer Diagnostics, we are cancer fighters. We are united by our mission to change lives by providing earlier, smarter answers. Through advances in cancer detection and treatment guidance, we will help eradicate the disease and the suffering it causes. This Engineer I, Quality role will be involved in all phases of system development including requirements, analysis, design, testing, and support. The ideal candidate must demonstrate the ability to understand system architecture, design, implementation and possess the ability to succinctly develop the testing strategy to deliver high-quality results in a time-sensitive environment. Location : Onsite in San Diego, CA or Madison, WI Hours : 1st Shift, Business Hours Essential Duties Include, but are not limited to, the following : Participate in requirements, design, and review meetings. Participate in development of test strategy, test plan, test cases, and risk assessment leading to successful implementation and timely project completion. Create, maintain and execute test cases/test scripts (manual and automated) for the user stories developed to support the new features, as well as components. Develop test scripts to validate the UI functionality and REST API's. Create and execute SQL queries to verify data completeness, correctness, data transformation and data quality. Report, track and escalate anomalies discovered during testing and ensure closure on the issues. Collaborate with cross-functional teams to ensure timely and effective testing as part of a regular release schedule. Assist with defining and implementing quality improvement initiatives. Perform other duties as assigned. Excellent written and verbal communication inclusive of technical documentation skills. Ability to integrate and apply feedback in a professional manner. Ability to prioritize and drive results with a high emphasis on quality. Uphold company mission and values through accountability, innovation, integrity, quality, and teamwork. Support and comply with the company's Quality Management System policies and procedures. Maintain regular and reliable attendance. Ability to act with an inclusion mindset and model these behaviors for the organization. Minimum Qualifications Bachelor's Degree in Computer Science or related field; or high school degree/general education diploma and 4 years of relevant experience in lieu of degree. 1+ years of experience with software testing. Demonstrated ability to perform the Essential Duties of the position with or without accommodation. Authorization to work in the United States without sponsorship. Preferred Qualifications 1+ years of experience with web-based enterprise application testing. 1+ years of experience using one or more tools; Selenium, Postman, SOAPUI, JMeter, preferred. 1+ years of experience working in an Agile/Scrum-like environment. The base pay for this position is $81,500.00 – $141,300.00. In specific locations, the pay range may vary from the range posted.

Ver trabalho
Penetration Tester / Active Secret
PeratonArlington, United Stateshá 23 dias
Tempo integralNo localMeio$86,000 - $138,000 / Year
pythonjavascriptbashpowershellawsazure+11

About Peraton Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure. Program Overview Encompasses technical, engineering, data analytics, cyber security, management, operational, logistical, and administrative support for Bureau of Diplomatic Security, Cyber and Technology Security Directorate in three key offices/functional areas: Cyber Monitoring and Operations, Cyber Threat and Investigations, and Technology Innovation and Engineering State. About The Role Peraton is seeking an experienced Cyber Penetration Tester to become part of Peratons' Federal Strategic Cyber programs. Location: Northern VA; Hybrid - flexible as long as person can come on-site as & when needed. In this role, you will: Support the Red Cell Team by performing and leading penetration tests to assess the security of customer systems. Identify vulnerabilities and develop recommended remediations to satisfy mandated NIST 800-53 security controls. Report and demonstrate findings to system owners and engineers. Maintain Red Cell infrastructure. Develop or modify tools to automate discovery or exploitation. Qualifications Basic Qualifications: Bachelors degree and 9 years experience, or a Master's and 7 years of experience. In lieu of a degree, 4 years of additional experience may be considered. Minimum of 2 years with penetration testing experience. Possess one of the following certifications, OR be able to obtain before start date: CASP+ CE, CCNA Cyber Ops, CCNA-Security, CCNP Security, CEH, CFR, CISA, CISSP (or Associate), Cloud+, CySA+, GCED, GCIA, GCIH, GICSP, SCYBER. Demonstrated experience with Kali Linux. Demonstrated penetration testing tools experience with Nmap, Burp Suite, Metasploit, etc. Demonstrated ability in evaluating vulnerabilities, performing root cause analysis, and reporting findings utilizing assessment methodologies such as NIST SP 800-115, Penetration Testing Execution Standard (PTES), Information Systems Security Assessment Framework (ISSAF), OWASP Web Security Testing Guide (WTG), etc. Demonstrated ability to lead a penetration test and guide Senior/Junior Penetration Testers. U.S. citizenship required. An active Secret security clearance. Must have the ability to obtain a final Top Secret security clearance. Preferred: Active Top Secret or TS/SCI clearance. One of the following certifications or an alternate, verifiable certification demonstrating IT security competence: CompTIA CASP+ ISC2 Certified Information Security Professional (CISSP) ISC2 Certified Cloud Security Professional (CCSP) ISC2 Information Systems Security Engineering Professional (ISSEP) One of the following certifications or an alternate, verifiable certification demonstrating practical penetration testing competence: Offensive Security Certified Professional (OSCP) Offensive Security Certified Professional (OSCP) Hack the Box Certified Penetration Testing Specialist (CPTS) TCM Security Practical Network Penetration Tester (PNPT) GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) Zero Point Security Red Team Ops II Advanced understanding of the following: NIST Risk Management Framework (RMF) and the Assessment and Authorization (A&A) process. Security principles such as CIA, IAAAA, access control models, risk management, etc. Networking principles and technologies such as IP routing, TCP/UDP, VPNs, firewalls, NAT, etc. Common network protocols such as SSH, FTP, SMTP, SMB, HTTP, etc. Operating system principles such as process management, device management, user management, file systems, etc. Data processing principles such as encoding, hashing, encryption, etc. Scripting and programming languages such as Bash, Python, PowerShell, JavaScript, etc. Common application vulnerabilities and exploits such as outdated components, permissions mis-configurations, lack of input validation, logging/monitoring failures, etc. Common web application vulnerabilities and exploits such as XSS, SQLi, LFI, file uploads, broken authentication mechanisms, etc. Active Directory (AD) enumeration and attacks such as kerberoasting, AS-REP roasting, abusing mis-configured privileges, crafting golden tickets, etc. Public Key Infrastructure (PKI) and navigating IT environments implementing multifactor authentication. Cloud technologies and platforms such as Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), etc. Details Target Salary Range: $86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits. Application Statements: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate's own. EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

Ver trabalho
Sr. Penetration Tester
X8Columbia, United Stateshá 22 dias
Tempo integralNo localJúnior$120,000 - $220,000 / Year
ecspenetration testingremediation

Washington, DC Metropolitan Area — Anticipated Job Description X8 is seeking an experienced Penetration Tester to support the U.S. Secret Service (USSS) Enterprise Cybersecurity Services (ECS) program. The role performs authorized offensive security assessments to identify vulnerabilities and strengthen mission-critical systems. This is an anticipated position supporting a pending federal contract; employment is contingent upon contract award and funding availability. The ideal candidate has extensive hands-on testing experience across infrastructure, applications, cloud, and identity environments and can communicate findings clearly to federal stakeholders. What You'll Be Doing Develop USSS-approved rules of engagement, test plans, and testing procedures. Perform authorized on-site penetration tests of enterprise networks. Conduct vulnerability discovery, controlled exploitation, and lateral movement. Perform annual penetration tests of designated High Value Asset (HVA) systems. Test networks, web applications, databases, and cloud services. Identify exploitable weaknesses and assess operational risk. Document technical evidence, findings, and prioritized remediation actions. Present results to technical teams and government stakeholders. WHAT REQUIRED SKILLS YOU'LL BRING Five (5) years of hands-on penetration testing experience. Experience testing infrastructure, applications, cloud, and identity environments. Current OSCP, GPEN, or equivalent recognized penetration testing certification. Evidence of past performance or experience demonstrating testing competency. Experience preparing and executing authorized rules of engagement. Knowledge of network, application, database, and cloud attack surfaces. Experience with vulnerability validation and controlled exploitation. Ability to write actionable reports and remediation recommendations. Strong communication skills with technical and government stakeholders. U.S. citizenship and ability to meet USSS suitability requirements. What Desired Skills You'll Bring Experience assessing federal High Value Asset (HVA) systems. Experience with large-scale enterprise networks and remediation coordination. WHY JOIN X8? Support a mission-critical U.S. Secret Service cybersecurity program. Work with federal mission stakeholders and experienced technical teams. Contribute directly to enterprise cybersecurity resilience. Competitive salary and benefits. Minimum Clearance Required TS clearance with SCI eligibility; USSS-adjudicated background investigation required. CONTRACT STATUS This anticipated role is subject to contract award, funding, final position requirements, and applicable government approvals. Final compensation depends on qualifications and approved contract funding. Compensation Anticipated annual base salary: $120,000.00-$220,000.00 (good-faith estimate) Bonus potential, subject to company policy 401K Match - 10% Paid time off - 24 PTO Days, 13 Holidays Medical Benefits - 100% Employee, 80% Dependent, $1000 company paid HSA Contribution

Ver trabalho
Senior Penetration Tester / Red Team Engineer
Tempo integralNo localMeio$134,000 - $154,500 / Year
pythonbashpowershellowasppenetration testinglinux+6

Practice - CIS - Cloud, Infrastructure, and Security Services About Cloud Infrastructure & Security Services: Cognizant's Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment. Job Summary We are seeking an experienced Senior Penetration Tester / Red Team Engineer to conduct advanced offensive security assessments across applications, networks, infrastructure, cloud, APIs, and endpoint environments. This role will simulate real-world cyberattacks to identify exploitable weaknesses, validate security controls, and improve enterprise cyber resilience. The ideal candidate will bring deep expertise in penetration testing, exploitation, security automation, and vulnerability analysis. The position requires strong hands-on technical skills combined with the ability to clearly communicate security risks and remediation recommendations. In This Role, You Will Conduct comprehensive penetration testing across web applications, APIs, networks, cloud environments, mobile applications, and Windows/Linux systems. Perform vulnerability assessments using automated scanning platforms and advanced manual testing techniques to identify exploitable security weaknesses. Simulate realistic adversary scenarios to evaluate authentication, authorization, access controls, network defenses, and overall security resilience. Identify and validate vulnerabilities, misconfigurations, exposed credentials, insecure code, and potential attack paths across enterprise environments. Utilize offensive security tools such as Burp Suite, Metasploit, Nmap, Kali Linux, Pentera, and vulnerability scanning platforms. Develop Python and Bash scripts, automation utilities, and custom testing approaches to improve penetration testing efficiency and coverage. Document assessment methodologies, technical evidence, risk impact, and findings while providing clear remediation recommendations to stakeholders. Partner with application, infrastructure, cloud, and security teams to remediate identified vulnerabilities and validate fixes through retesting. Research emerging threats, CVEs, OWASP vulnerabilities, exploitation techniques, and evolving offensive security methodologies. Support security assessments, compliance initiatives, risk reviews, and continuous improvement of enterprise offensive security capabilities. What You Need To Have To Be Considered 8+ years of hands-on experience in Penetration Testing, Red Teaming, Offensive Security, or Security Engineering. Expert-level experience conducting penetration tests across web applications, networks, APIs, endpoints, cloud platforms, and enterprise infrastructure. Strong expertise in vulnerability exploitation, attack-path analysis, credential security, authentication testing, and security control validation. Advanced hands-on experience with offensive security tools such as Burp Suite, Metasploit, Nmap, Kali Linux, Pentera Console/Surface, and vulnerability scanners. Strong scripting and automation skills using Python, Bash, PowerShell, or similar technologies. Deep understanding of OWASP, CVE/CVSS, MITRE ATT&CK, network security, application security, and modern attack methodologies. Experience working with development and infrastructure teams to provide remediation guidance and perform validation/retesting of security fixes. Strong technical reporting skills with the ability to communicate vulnerabilities, business impact, and remediation priorities to technical and leadership audiences. Relevant certifications such as OSCP, OSEP, OSWE, GPEN, GXPN, CRTO, or equivalent offensive security certifications are preferred. #CB #Ind123 Applications will be accepted until 30 Oct 2026. Salary And Other Compensation The annual salary for this position is between $[134,000 - 154,500] depending on experience and other qualifications of the successful candidate. This position is also eligible for Cognizant's discretionary annual incentive program, based on performance and subject to the terms of Cognizant's applicable plans. Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements: Medical/Dental/Vision/Life Insurance Paid holidays plus Paid Time Off 401(k) plan and contributions Long-term/Short-term Disability Paid Parental Leave Employee Stock Purchase Plan

Ver trabalho
Para empregadores

Alcance — candidatos qualificados

Publique seu emprego hoje e receba inscrições em 24 horas.

Publicar um empregoPostagem gratuita disponível
Experienced Penetration Tester
B&M CyberWashington, United Stateshá 30 dias
Tempo integralNo localMeio
pythonbashpowershellssoowasppenetration testing+4

B&M Cyber is seeking an experienced Penetration Tester to support cybersecurity testing activities for our Federal clients. The successful candidate will plan and conduct hands-on penetration testing across infrastructure, application, cloud, and identity environments and provide actionable recommendations to improve our clients' security posture. Candidates must be able to obtain a security clearance and be willing to work onsite at Federal client locations in Washington, D.C. or Northern Virginia five (5) days per week. This position is contingent upon satisfaction of all applicable security requirements. Responsibilities Identify and document vulnerabilities, misconfigurations, and compliance issues through thorough examination of external and internal infrastructure, systems, and security controls. Develop and execute approved Rules of Engagement (RoE), test plans, and standard operating procedures (SOPs) aligned with client requirements, penetration testing best practices, and approved testing boundaries. Plan, scope, conduct, and document penetration testing across internal and external networks, web applications, APIs, databases, cloud services, Active Directory, and other identity technologies. Perform the full testing lifecycle, from non-intrusive scanning and vulnerability discovery through exploitation, privilege escalation, lateral movement, and other post-exploitation activities, within the approved RoE. Analyze findings, identify attack paths, assess technical and mission impact, and recommend practical corrective actions. Promptly escalate critical and high-risk findings to client leadership in accordance with the approved RoE. Prepare accurate, well-written technical reports that describe findings, exploitation procedures, risks, and actionable remediation recommendations, and present results to developers, system administrators, project managers, and senior Government stakeholders. Safeguard sensitive information encountered during testing (e.g., credentials, personally identifiable information, and controlled unclassified information) in accordance with client security policies. Manage assignments and changing priorities, meet deadlines, coordinate with stakeholders, and proactively identify, communicate, and help resolve risks and issues. Contribute to the continuous improvement of penetration testing methodologies, tools, and frameworks, and participate in technical reviews, knowledge sharing, and mentoring. Qualifications Experience independently planning, executing, documenting, and presenting complex penetration testing engagements. Ability to provide a past performance report or comparable documentation (e.g., a sanitized penetration test report you authored or detailed project examples) that demonstrates your competency level as a penetration tester. Do not submit client-identifying, classified, or controlled information. At least five (5) years of hands-on penetration testing experience across infrastructure (internal and external networks), application (web applications and APIs), cloud, and identity-centric (e.g., Active Directory, Entra ID, and federation/SSO) environments. Current Offensive Security Certified Professional (OSCP or OSCP+) or GIAC Penetration Tester (GPEN) certification, or an equivalent hands-on offensive security certification (e.g., GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) or OffSec Experienced Penetration Tester (OSEP)). Ability to read and use results of various security testing tools, perform false-positive analysis and validation, and communicate results and recommended remediation actions to technical and non-technical audiences. Strong knowledge of network, application, cloud, and identity security and industry-standard penetration testing tools (e.g., Burp Suite, Metasploit, Nmap, Nessus, BloodHound, Impacket, and command-and-control frameworks). Strong analytical, problem-solving, written and verbal communication, technical writing, and documentation skills, with attention to accuracy and completeness. Ability to work independently and collaboratively while managing multiple priorities. Preferred Qualifications Active Secret or Top Secret clearance. Bachelor's degree or higher in Cybersecurity or a related field. Experience supporting Federal, law enforcement, defense, intelligence community, or similarly sensitive environments. Working knowledge of relevant Federal cybersecurity requirements, NIST security testing guidance (e.g., NIST SP 800-115), OWASP security testing practices, and the MITRE ATT&CK framework. Experience serving as a senior technical specialist, technical lead, or subject matter expert, including reviewing technical work products and mentoring less experienced staff. Ability to automate testing, analysis, or reporting using Python, PowerShell, Bash, or similar languages. Experience briefing senior leadership and translating technical findings into recommendations tied to operational or mission impact. Additional relevant certifications such as GIAC Web Application Penetration Tester (GWAPT), GIAC Cloud Penetration Tester (GCPN), OffSec Web Expert (OSWE), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or similar. Security and Clearance Requirements Applicants selected will be subject to a security investigation. Final placement is contingent upon obtaining and maintaining the required eligibility and receiving Government approval. U.S. citizenship is required for this position in accordance with Federal requirements. Equal Opportunity Employer B&M Cyber is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other legally protected basis, in accordance with applicable law. About Us B&M Cyber (B&M Consulting Group, Inc.) is a woman-owned small business (WOSB) with significant expertise and experience providing cybersecurity services to clients throughout the Federal government. We value collaboration, innovation, and continuous growth. Our employees work closely across corporate and client teams in a consulting environment to solve challenges and provide exceptional service. We foster a supportive environment where team members can share ideas, build new skills, and pursue the areas they are passionate about.

Ver trabalho
Penetration Tester (Hybrid)
Tempo integralNo localMeio
pythonbashpowershellawsazuregcp+14

Candidates are encouraged to apply as soon as possible. Koniag Operations Services, a Koniag Government Services company, is seeking a skilled and detail-oriented Penetration Tester to join our cybersecurity team supporting critical security assessment initiatives for KOS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust. This position is Hybrid. Benefits include medical, dental, and vision insurance, 401(k) retirement plan, paid time off, paid parental leave, life and disability insurance, flexible spending accounts, commuter benefits, and tuition reimbursement. The ideal candidate is a motivated security professional with a strong technical background and ethical mindset, possessing the ability to apply their offensive security skills and analytical expertise to identify vulnerabilities, assess risks, and strengthen the security posture of complex systems and networks. The Penetration Tester will conduct authorized simulated attacks on systems, networks, and applications to identify security vulnerabilities before malicious actors can exploit them. Principal Responsibilities Will Include But Are Not Limited To Perform penetration testing on networks, web applications, mobile applications, and infrastructure to identify security weaknesses. Conduct vulnerability assessments and exploit identified vulnerabilities in a controlled, authorized manner. Develop and execute test plans, including reconnaissance, scanning, exploitation, and post-exploitation activities. Utilize industry-standard tools and techniques (e.g., Metasploit, Burp Suite, Nmap, Nessus) to assess system security. Write custom scripts and tools to automate testing processes and exploit development as needed. Document findings in detailed technical reports, including risk ratings, exploitation methods, and remediation recommendations. Present findings and recommendations to technical teams and leadership in a clear, actionable manner. Collaborate with system administrators, developers, and security teams to validate and remediate identified vulnerabilities. Conduct social engineering assessments, including phishing campaigns, when required. Stay current on emerging threats, attack vectors, and penetration testing methodologies. Participate in red team/blue team exercises and support purple team collaboration efforts. Ensure all testing activities comply with rules of engagement, legal requirements, and organizational policies. Support continuous monitoring and security assessment efforts across the enterprise. Required Education and Experience: Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field from an accredited college or university; equivalent experience may be considered in lieu of a degree. 3-5 years of experience in penetration testing, ethical hacking, or offensive security roles. Demonstrated experience conducting network, web application, and/or wireless penetration tests. Experience with scripting languages (e.g., Python, Bash, PowerShell) for tool development and automation. Required Skills And Competencies Exceptional communication skills – both written and oral – with the ability to translate complex technical findings into actionable business recommendations for both technical and non-technical stakeholders. Strong understanding of networking protocols, operating systems (Windows, Linux), and system architectures. Hands-on experience with penetration testing tools, including Metasploit, Burp Suite, Nmap, Wireshark, and Kali Linux. Knowledge of common vulnerability frameworks, including OWASP Top 10, MITRE ATT&CK, and CVSS scoring. Experience conducting both internal and external penetration tests. Ability to think creatively and adopt an attacker's mindset to identify non-obvious security weaknesses. Strong understanding of security concepts, including encryption, authentication, and access control mechanisms. Ability to work independently and manage multiple engagements under tight deadlines. Strong report writing skills with attention to detail and accuracy. Ability to obtain and maintain a Public Trust Clearance. Desired Skills And Competencies Experience working in a federal government IT environment supporting security assessments. Industry certifications such as OSCP, GPEN, CEH, or CISSP. Experience with cloud security assessments (AWS, Azure, GCP). Familiarity with red team operations and adversary emulation techniques. Knowledge of secure coding practices and application security testing (SAST/DAST). Experience with container and Kubernetes security testing. Familiarity with compliance frameworks such as NIST 800-53, FedRAMP, or RMF. Our Equal Employment Opportunity Policy The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment. The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations. Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com. Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352

Ver trabalho
Penetration Tester 3 – TS/SCI w/Poly
AmentumColumbia, United Stateshá 23 dias
Tempo integralNo localMeio$175,000 - $212,000 / Year
penetration testingdentalelectrical engineeringtaxrisk managementinsurance+3

Purpose and Impact: Are you interested in using your skills to help shape the Cyber, Security, & Intel space? If so, look no further. We are seeking a Penetration Tester 3 to join our team of passionate individuals on our Prime contract. In this role you will support challenging, mission-critical projects that make a direct impact on the nation's security and intelligence mission. Essential Responsibilities: Serve as a Subject Matter Expert providing testing expertise of the Risk Management Framework. Direct and/or participate in the testing phase of security controls assessments using specialized knowledge of network protocols, operating systems, architectures, equipment, services, and standards. Perform vulnerability and penetration testing using a wide variety of tools Research and evaluate emerging technologies relevant to information systems security; interpret agency specific and federal security regulations Perform both network and application-level testing using established testing protocols and Methods Perform vulnerability and penetration testing using a wide variety of tools Research and evaluate emerging technologies relevant to information systems security; interpret agency specific and federal security regulations Perform both network and application-level testing using established testing protocols and methods Clearance Required: TS/SCI Poly Minimum Education: A Bachelor's degree in Computer Science, Information Technology Engineering, or related field. In lieu of a Bachelor's degree, an additional four (4) years of experience for a total of twelve (12) years. undefined Minimum Years of Experience: Eight (8) experience of related work experience as a Penetration Tester performing both network and application-level testing using established test protocols and methods. A Bachelor's degree in Computer Science or a related field (e.g. General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cybersecurity, Information Technology, Information Assurance, Information Security, and Information Systems). In lieu of a Bachelor's degree, four (4) additional years of Penetration Testing experience may be substituted for a total of twelve (12) years of experience. Required Certifications: DoD 8570 compliance with IAT III is required – CASP+CE (now SecurityX), CCNP Security, CISA, GCED, GCIH, CCSP, CISSP (or Associate) #javelin This position is not designated as a safety sensitive position. As part of our commitment to maintaining a safe and compliant work environment, Amentum is a drug-free workplace and requires all personnel to comply with company drug and alcohol policies as a condition of employment. Employment is contingent upon successful completion of the drug screening process. Please note that this may include pre-hire screening for marijuana, as well as other federally controlled substances due to Amentum's role as a federal contractor and trusted partner to the US Government. Other Responsibilities: Safety Amentum enforces a safety culture whereby all employees have the responsibility for continuously developing and maintaining a safe work environment. As appropriate, each employee is responsible for completing all training requirements and fulfilling all self-aid/buddy aid responsibilities, participating in emergency response tasks and serving on safety committees and teams. Quality Quality is the foundation for the management of our business and the keystone to our goal of customer satisfaction. It is our policy to consistently provide services that meet customer expectations. Accordingly, each employee must conform to the Amentum Quality Policy and carry out job activities in compliance with applicable Amentum Quality System documents and customer contracts. Each employee must read and understand his/her Quality Management and Customer Satisfaction responsibilities. Procedure Compliance Each employee must read, understand and implement the general and specific operational, safety, quality and environmental requirements of all plans, procedures and policies pertaining to his/her job. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Compensation Details: $175,000 - $212,000 The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws. Benefits Overview: Our health and welfare benefits are designed to support you and your priorities. Offerings include: Health, dental, and vision insurance Paid time off and holidays Retirement benefits (including 401(k) matching) Educational reimbursement Parental leave Employee stock purchase plan Tax-saving options Disability and life insurance Pet insurance Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits. Original Posting: 10/20/2026 - Until Filled Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs. Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.

Ver trabalho
Penetration Tester- FULLY CLEARED with POLYGRAPH REQUIRED
Tempo integralNo localMeio
awspenetration testinglinuxdentalelectrical engineeringrisk management+4

DoD 8570 compliance with IAT III is required Due to federal contract requirements, United States citizenship and an active TS/SCI security clearance and polygraph are required for the position. Required: Must be a US Citizen Must have TS/SCI clearance w/ active polygraph Eight (08) experience of related work experience as a Penetration Tester performing both network and application-level testing using established test protocols and methods. Bachelor's degree in Computer Science or a related field (e.g. General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cybersecurity, Information Technology, Information Assurance, Information Security, and Information Systems). In lieu of a Bachelor's degree, an additional four (04) years of experience for a total of twelve (12) years experience. Serve as a Subject Matter Expert providing testing expertise of the Risk Management Framework. Direct and/or participate in the testing phase of security controls assessments using specialized knowledge of network protocols, operating systems, architectures, equipment, services, and standards. Perform vulnerability and penetration testing using a wide variety of tools Research and evaluate emerging technologies relevant to information systems security; interpret agency specific and federal security regulations Perform both network and application-level testing using established testing protocols and methods DoD 8570 compliance with IAT III is required. The benefits package: Affordable healthcare options with 80% employer paid premium PLUS a company-funded HSA Comprehensive Dental insurance Vision with 80% employer paid premium Employer paid Life insurance 100% Employer paid Short-term and Long-term disability 100% Annual training, continued education, and professional memberships reimbursement Unlimited access to Red Hat Enterprise Linux and AWS training and accreditation Annual reimbursement for technology i.e. phones, computers, printers, etc. 401(k) with company match up to 5% with 100% immediate vesting (after 90 days of employment) The environment and perks: Professional development investment and paid time off for training Contract and work locations in Maryland, Virginia, Colorado, Texas, Utah, Florida and Hawaii. Team building events throughout the year such as Destination Family Events, Holiday Party, Monthly Get-Togethers Leadership Team engagement and mentorship Performance Recognition Program Complimentary branded apparel Don't see a job opening that's the perfect fit? Apply to our General Position to join our talent pool for consideration for future opportunities. Know someone else who may be a good fit? Refer them through the CTI External Referral Program and you could receive a one-time referral bonus of up to $10,000 ! Email cti-staffing@cti-md.com for more information. Constellation Technologies is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, religion, creed, color, national origin, ancestry, sex (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, medical condition, marital or domestic partner status, sexual orientation, gender, gender identity, gender expression and transgender status, mental disability or physical disability, genetic information, military or veteran status, citizenship, low-income status or any other status or characteristic protected by applicable law. Job applicants can submit questions about CTI's equal employment opportunity policy to cti-hr@cti-md.com. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us. The pay range for this job, with multi-levels, is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Ver trabalho
Cyber Penetration Tester SME- Active TS (SCI Eligible)
Tempo integralNo localMeio
penetration testinglinuxdentalremediationinsurance

Vibrint is a trusted provider of mission-critical systems and analysis that transform our customers' capacity and capability in harvesting and harnessing data. Working alongside many of the most talented professionals in public service, we work tirelessly to create and sustain new solutions and services that meet the stringent demands across a variety of customer missions. Our people know they'll be doing work that matters at the heart of the national security mission, exploring new possibilities at the cutting edge of technology. They know they will be well-rewarded and recognized for their commitment. Our people know they will enjoy plentiful opportunities to grow, thrive, and have fun as a member of the Vibrint family. Join Vibrint, where your career is a priority, and your future is our shared goal. _ We are seeking a highly skilled and proactive Penetration Testing SME to join our Cybersecurity team. As a Penetration Testing SME, you will play a critical role in protecting our clients' infrastructure and data by identifying, testing, and validating security weaknesses across networks, systems, applications, and cloud environments. You will work closely with security engineers, incident responders, system owners, and other stakeholders to assess risk, recommend remediation strategies, and strengthen overall defensive posture. This role also requires the ability to train, mentor, and upskill analysts and team members in penetration testing methodologies, offensive security techniques, and adversary tradecraft. Required Skills The candidate shall be able to: Conduct advanced penetration testing across enterprise and government environments, including network, web application, wireless, and internal/external assessments Perform authorized exploitation and post-exploitation activities to validate risk and demonstrate real-world attack impact Develop and execute penetration testing methodologies, tactics, techniques, and procedures aligned with industry best practices Analyze security architectures, configurations, and controls to identify gaps and provide actionable remediation recommendations Produce clear, comprehensive technical reports and executive summaries outlining findings, risk, and mitigation strategies Collaborate with blue teams, incident responders, system owners, and developers to improve security posture and validate remediation efforts Stay current on adversary tactics, emerging vulnerabilities, and offensive security trends to continuously enhance testing capabilities Provide technical leadership and oversight for penetration testing activities across the team Train, mentor, and develop junior analysts through hands-on instruction, workshops, and knowledge-sharing sessions Guide team members on offensive tools, methodologies, reporting standards, and operational best practices Desired Skills Advanced Penetration Testing Expertise: Proven experience leading and conducting complex penetration tests in enterprise or federal environments, including adversary emulation, red team-style assessments, and validation of security controls against advanced threats Technical Proficiency in Offensive Security Tooling: Hands-on experience with tools such as Kali Linux, Metasploit, Burp Suite Pro, Cobalt Strike, Nmap, Nessus, BloodHound, Impacket, and other offensive security platforms used for enumeration, exploitation, and reporting Training and Mentorship Experience: Demonstrated ability to train analysts and junior personnel in penetration testing concepts, offensive tooling, attack lifecycle methodology, and reporting standards Application and Infrastructure Security Knowledge: Strong understanding of web application security, Active Directory exploitation, privilege escalation, lateral movement, cloud security testing, and common attack vectors affecting modern enterprise environments Analytical and Collaborative Mindset: Strong ability to analyze complex environments, simulate realistic attack scenarios, and work closely with defenders, engineers, and leadership to improve security controls and reduce organizational risk Qualifications 10+ years of experience in penetration testing, red teaming, or offensive cybersecurity operations Hands-on experience using industry-standard penetration testing and vulnerability assessment tools (e.g., Burp Suite, Metasploit, Nmap, Nessus, BloodHound, etc.) Demonstrated experience conducting exploitation, privilege escalation, and lateral movement in authorized environments Experience training, mentoring, or leading analysts in cybersecurity or offensive security disciplines Strong understanding of common cyber threats, attack vectors, and adversary tactics (MITRE ATT&CK, etc.) Bachelor's degree in computer science, Cybersecurity, or related field (or equivalent experience) Relevant certifications such as OSCP, OSCE, GPEN, GXPN, CISSP, or GIAC preferred Active Top-Secret Clearance (SCI Eligible) preferred The pay range for this position is a general guideline only and not a guarantee of compensation or salary. Our approach to crafting offers considers various factors to provide an equitable and competitive comprehensive compensation package. These considerations include, but are not limited to, contracted rates, education, certification(s), experience, specific competencies required for this position, and geographic location. Vibrint's comprehensive compensation package includes but is not limited to: competitive salary; annual merit-based salary increase and discretionary bonus program; 401(k) plan with a company contribution; 11 paid federal holidays; 160 hours of paid time off; medical, dental, vision, life and short- & long-term disability insurance; employee assistance program; and a generous professional development allowance. #nocj

Ver trabalho
Cybersecurity Penetration Tester SE-4
OdysseyColorado Springs, United Stateshá 17 dias
Tempo integralNo localMeio
pythonjavascriptjavarubyphpbash+8

Position Summary Odyssey is seeking an SE‑4 Cybersecurity Penetration Tester to support the 48th Cyberspace Test Squadron (48 CTS), TGEC, under the TMAS III contract. This position is located at Peterson Space Force Base, CO, and supports cybersecurity penetration testing, compliance testing, and vulnerability analysis for Air Force and Space Force systems. The Penetration Tester will work in a fast‑paced, multi‑disciplinary environment and conduct hands‑on testing to identify and characterize system vulnerabilities across a wide range of technologies. This is a full‑time position at Peterson SFB, CO, with 25% CONUS/OCONUS travel required to meet 48 CTS mission needs. Responsibilities Duties to include, but not limited to: Lead and conduct independent penetration testing, data collection, test automation, and reporting Develop test tools and strategies tailored for DoD cybersecurity assessments Perform system security analysis to identify vulnerabilities and exploitation techniques across software and hardware systems Execute hands‑on testing across multiple operating systems (Windows, Linux, UNIX) and software/databases (SQL Server, Oracle, Apache, etc.) Provide technical guidance and mentorship to penetration test teams Document and communicate test results for both technical and non‑technical audiences Manage, plan, and provide direction for CVI, ACD, CVPA, and AA cyber test teams Interface with DoD Program Offices to scope, plan, execute, and report penetration test activities Qualifications Citizenship: Must be a US citizen Minimum Required Qualifications Clearance: Active Secret required; must be able to obtain and maintain a Top Secret clearance Education: Master's degree in cybersecurity, computer engineering, computer science, IT systems, or related technical discipline AND at least 10 years of relevant experience Additional experience may substitute for degree Certifications: Must obtain DoD 8570 IAT Level III certification (CASP, CISSP, ISSEP, etc.) within 6 months of hire and maintain certification Experience with penetration testing tools and methods Experience exploiting web applications Strong analytical, communication, and technical documentation skills Ability to work independently and on cross‑functional teams Preferred Qualifications Clearance : Top Secret Certifications: Advanced cybersecurity certifications (CISSP, CASP, OSCP, OSEP, OSWE, GPEN, GWAP, etc.) Experience leading penetration testing teams and events Knowledge of source code vulnerability analysis Knowledge of wired and wireless network protocols Experience with interpreted and compiled programming languages Technical Skills Experience using modern penetration testing tools and methods Experience testing and exploiting web applications Strong analytical and problem‑solving skills Knowledge of Windows and Linux OS environments, including Kali Ability to execute exploitation across networks, web applications, OS, and embedded systems Experience with CVI, CVPA, ACD, and AA test methodologies Knowledge of scripting/interpreted languages (Python, Ruby, JavaScript, Bash, PowerShell, PHP) — preferred Knowledge of compiled languages (C, C++, Assembly, Java) — preferred Knowledge of source code vulnerability analysis — preferred Understanding of network security, network protocol structures (wired and wireless), and system exploitation Interpersonal Skills Strong organization and decision‑making abilities Excellent verbal and written communication skills Ability to work independently with minimal supervision Ability to work effectively in both small and large team environments Ability to engage collaboratively with DoD program offices and technical teams Additional Information Location: Peterson Space Force Base, CO Work Environment: Onsite Job Status: Full‑Time Travel: 25% CONUS / OCONUS TDYs #TMAS3 #CTG Company Overview Odyssey is a world-class technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. Odyssey meets the military's operational needs by integrating layered defense systems from equipment, technology, and services to data, information, and business operations. We streamline defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality. Odyssey is dedicated to excellent contract execution, peak organizational performance, and fostering a workplace built on employee care. Odyssey is proud to live out our core values of commitment, ambition, and respect in our work and communities through OdysseyCares , a philanthropic group focused on giving back through direct donations, an employer match program, and volunteering events. Please note : Final compensation for this position will be determined by various factors such as the Federal Government contract labor categories and contract wage rates, relevant work experience, specific skills and competencies, geographic location, education, and certifications.

Ver trabalho
Red Team Operator
SIXGENWashington, United Stateshá 30 dias
Tempo integralNo localMeio$115,000 - $120,000 / Year
pythonrubyphpperlbashpenetration testing+7

SIXGEN's mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Red Team Operator Job Type: Full Time Location: On-site 1x/week in Washington DC Clearance Requirements: None, but Public Trust preferred Travel: None ABOUT THE TEAM SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. You'll work with our highly skilled operators conducting research and assessments based on real-world threats. You'll simulate adversaries and malicious actors and report details and actionable findings on critical assets and infrastructures. Using innovative processes, tools, and techniques, you'll predict and overcome cybersecurity vulnerabilities. Your successes will be supported by our diverse team of experienced, technical talent. WHAT YOU'LL DO Simulate real-world cyberattacks to assess and challenge the effectiveness of security controls and incident response capabilities. Conduct reconnaissance, exploitation, and post-exploitation activities using adversary tactics, techniques, and procedures (TTPs). Develop and use custom tools and methods to evade detection and maintain stealth during engagements. Collaborate with blue and purple teams to improve detection, response, and overall security posture. Document findings and deliver clear, actionable reports to technical and executive stakeholders. REQUIRED QUALIFICATIONS US Citizen with the ability to obtain a Public Trust clearance. CRTO certification (or ability to earn within 3 months of hire). OSCP and/or GPEN certifications. Technical experience (4+ years each): Hands on red team operations or government computer network exploitation/tactical operations. Using penetration testing and red teaming frameworks (e.g., Cobalt Strike, Kali) in production environments. Working with network technologies and protocols (OSI model, routing, network building/troubleshooting). Applying and investigating "living off the land" tactics, techniques, and procedures (TTPs). Scripting and programming (e.g., Bash, C#, Ruby, Perl, Python, PHP). Social engineering and physical security penetration testing. Writing clear, detailed cybersecurity assessment reports. Ability to secure, configure, deploy, and troubleshoot major operating systems (Windows, Linux/Unimax, macOS). COMPENSATION & BENEFITS Salary Range: $115,000 - $120,000 The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. The final salary offer will be determined after a thorough review of the candidate's background and alignment with the role. Additionally, SIXGEN offers top-tier benefits for full-time employees, including: Employer-paid health insurance premiums (medical, dental, vision) for you and your family Employer-paid short/long term disability insurance and basic life/AD&D insurance 401K with a 4% employer contribution Professional development reimbursement options available (training, certification, education, etc) Flexible and remote work policies for most positions Flexible PTO and holiday schedule OUR COMMITMENT SIXGEN is an Equal Opportunity Employer. We ensure that all applicants are considered for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, age, marital status, ancestry, projected veteran status, or any other protected group or class. We are committed to fostering an inclusive culture that values diversity in our people, reflecting the communities we serve and our customer base. We strive to attract and retain a diverse talent pool and create an environment where everyone is empowered to be their authentic selves at work.

Ver trabalho

Página {{página}} de 6097