Pentest Operator / Penetration Tester (Top Secret Clearance)

Location: Beltsville, Maryland, United States — onsite

Salary: $120,000–$170,000 per year; contract-to-hire

Company

hirify.global delivers outsourced services and workforce solutions across North America.

What you will do

• Conduct internal and external penetration testing across networks, web applications, enterprise systems, cloud-connected systems, and mission environments.
• Assess High Value Asset systems, validate security controls, identify exploitable vulnerabilities, and determine mission and business risk.
• Perform reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, post-exploitation analysis, and attack-path documentation.
• Support red team, adversary emulation, purple team, and detection-validation activities, including analysis of SIEM, EDR, endpoint, and network telemetry.
• Develop Rules of Engagement, test plans, assessment procedures, formal reports, and prioritized remediation recommendations.
• Present technical and executive out-briefs to system owners, security teams, engineers, government stakeholders, and senior leaders.

Requirements

• Active and maintained Top Secret federal or DoD security clearance required to start.
• Bachelor’s degree in cybersecurity, information technology, computer science, information systems, or a related field; equivalent relevant experience may substitute.
• At least five years of hands-on experience in penetration testing, red team operations, adversary emulation, vulnerability assessment, application security, cyber operations, or related offensive security work.
• Experience with internal and external network testing, web application testing, Active Directory, Windows and Linux systems, enterprise services, and OWASP Top 10 risks.
• Experience using tools such as Burp Suite, Metasploit, Nmap, Nessus, Kali Linux, Wireshark, BloodHound, Impacket, Responder, Hashcat, Cobalt Strike, and Sliver.
• Strong technical writing, verbal communication, stakeholder presentation, prioritization, and collaboration skills.

Nice to have

• Experience with federal enterprise penetration testing or High Value Asset cybersecurity assessments.
• Offensive security certifications such as OSCP, GPEN, GWAPT, GXPN, GRTP, PenTest+, CEH, or GCIH.
• Experience with detection engineering, SIEM and EDR validation, cloud security testing, incident response, threat hunting, or post-incident analysis.
• Experience with custom payloads, command-and-control simulation, proof-of-concept exploits, mentoring, or leading offensive security workstreams.

Culture & Benefits

• Work in commercial and federal environments with multidisciplinary technical and government stakeholders.
• Eligible employees may receive medical, dental, vision, spending account, life insurance, and voluntary benefit options.
• Eligible employees may participate in a 401(k) plan.