Penetration Testing Team Lead (Cybersecurity)

Location: Remote within close proximity to the National Capital Region, Virginia, United States. U.S. citizenship is required, and an active Public Trust 6c clearance or the ability to obtain and maintain one is required.

Salary: $170,000–$190,000 per year.

Company

hirify.global is the federal segment of Everforth, delivering technology solutions in data and AI, cybersecurity, and enterprise transformation for defense, intelligence, and federal civilian agencies.

What you will do

• Plan, coordinate, and lead Red Team and penetration testing engagements across federal network infrastructure, web applications, APIs, and cloud environments.
• Direct test scoping, execution, documentation, reporting, and remediation follow-up across complex engagements.
• Perform multi-layer exploitation and chain attacks across networks, operating systems, applications, APIs, and cloud platforms.
• Lead Purple Team activities with SOC and threat hunting teams to validate detection coverage and improve defensive response.
• Maintain offensive security tools, configurations, patches, upgrades, and inventory to ensure operational readiness.
• Mentor junior penetration testers and research emerging offensive techniques, adversary TTPs, and tooling.

Requirements

• U.S. citizenship and proximity to the National Capital Region are required.
• Active Public Trust 6c clearance or the ability to obtain and maintain it.
• 12+ years of offensive security experience, including penetration testing and Red Team operations in complex federal or enterprise environments.
• At least one of the following certifications: OSCP, OSCE, GXPN, or CEH.
• Hands-on experience with network, web application, AWS cloud, and API penetration testing, plus offensive security tooling and custom technique development.
• Strong knowledge of MITRE ATT&CK, NIST SP 800-115, DHS RVA standards, engagement management, technical writing, and presenting findings to senior government officials.

Nice to have

• Additional certifications such as OSEP, OSWE, AWS Certified Security Specialty, GPEN, or Burp Suite Certified Practitioner.
• Experience with NIST SP 800-53, NIST RMF, IRS Publication 1075, FedRAMP, and OMB compliance requirements.
• Experience with federal civilian agency programs, ICS/OT penetration testing, AWS GovCloud, Azure Government, EDR evasion, and advanced adversary emulation.
• Experience developing formal Red Team programs, including rules of engagement, test planning templates, and findings databases.
• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or equivalent professional experience.

Culture & Benefits

• Work on a mission-critical federal cybersecurity program protecting sensitive financial and personally identifiable information.
• Collaborate with vulnerability management, security engineering, SOC, and threat hunting teams.
• Join an environment focused on innovation, accountable delivery, and developing high-performing teams.
• Position is contingent upon contract award.