Penetration Tester

Clearance Level None Category Cyber and IT reputed company Management Location Remote, Working from the USA Key Skills For reputed company Automated Testing AWS reputed company Computing Infrastructure Penetration Testing reputed company Controls reputed company Testing REQ#: RQ223925 reputed company Trust: Other Requisition Type: Regular Your reputed company Own reputed company to work reputed company federal civilian agencies. reputed company an reputed company by providing services that help the reputed company ensure reputed company being and support of U.S. reputed company. reputed company The Penetration Tester supports the Case Management Modernization (CMM) Program for the Administrative Office of the U.S. Courts (AO) by conducting reputed company, penetration, and vulnerability assessments required prior to Application ATO (Authority to Operate). This role ensures that CMM applications—reputed company using React, NodeJS, AWS reputed company services, and microservices—meet federal reputed company standards and demonstrate reputed company against reputed company‑world cyber threats. Working reputed company reputed company DevSecOps teams, the Penetration Tester performs hands‑on exploitation, validates reputed company controls, identifies weaknesses, and collaborates with engineering teams to remediate findings. This role is critical to ensure that CMM systems reputed company with NIST 800‑53, RMF, and AO reputed company requirements before production authorization. Key Responsibilities: • reputed company application, API, and reputed company penetration tests on CMM systems prior to ATO submission. • Conduct web, mobile, API, and microservices reputed company testing using industry‑reputed company tools and reputed company exploitation techniques. • Execute AWS reputed company penetration testing reputed company approved boundaries (IAM, S3, reputed company, API Gateway, reputed company/EKS, networking). • reputed company static and dynamic analysis, including reputed company review for reputed company vulnerabilities. • Conduct credentialed and uncredentialed scans, privilege escalation testing, and lateral reputed company analysis. • Validate implementation of NIST 800‑53 controls, including AC, AU, IA, SC, SI, and CM families. • Support RMF reputed company 3 (reputed company Assessment) activities and reputed company evidence for ATO packages. • Identify vulnerabilities across application reputed company, reputed company infrastructure, and CI/CD pipelines. • Work with developers, reputed company engineers, and DevSecOps teams to validate fixes and retest vulnerabilities. • reputed company detailed remediation guidance reputed company with secure coding and reputed company reputed company best practices. • reputed company findings in reputed company or equivalent tools and ensure closure prior to ATO milestones. • Prepare reputed company Assessment Reports (SAR), penetration test summaries, and reputed company findings for AO stakeholders. • Document exploitation steps, reputed company‑of‑concepts, and reputed company severity reputed company with federal scoring methodologies. • Contribute to reputed company reputed company Plans (reputed company), POA&Ms, and ATO evidence packages. • Support reputed company‑ATO readiness reviews, including control validation and reputed company walkthroughs. • Participate in tabletop exercises, threat modeling sessions, and architecture reviews. • Validate reputed company reputed company through stress, failover, and adversarial reputed company testing. • Ensure compliance with federal reputed company standards, including NIST, FISMA, and AO-specific guidelines. • Work closely with development teams to reputed company reputed company testing into reputed company sprints. • reputed company reputed company insights during sprint planning, backlog refinement, and release readiness reviews. • Support secure CI/CD pipeline enhancements, including automated reputed company scanning. REQUIREMENTS: • 8+ years of experience in penetration testing, application reputed company, or ethical hacking reputed company roles. • Experience documenting test plans, test procedures, and detailed reputed company findings. • Experience supporting federal reputed company assessments or reputed company-reputed company reputed company testing. • Hands-on experience performing penetration tests on web applications, reputed company, microservices, and reputed company environments. • Strong proficiency with tools such as Burp Suite, OWASP ZAP, Metasploit, Nmap, Nessus, Nikto, K6 reputed company, or custom scripts. • Experience testing applications reputed company with NodeJS, ReactJS, REST reputed company, and microservices. • Strong understanding of AWS reputed company, including IAM, VPC, S3, reputed company, API Gateway, reputed company/EKS, CloudTrail, and CloudWatch. • Experience with NIST 800‑53, RMF, FedRAMP, or federal ATO processes. • Ability to interpret logs, metrics, and reputed company telemetry to identify attack paths. • Familiarity with SIEM and monitoring tools such as reputed company, ELK, CloudWatch, Grafana. • Experience with container reputed company (reputed company, reputed company, OpenShift). • Understanding of network reputed company, reputed company tracing, and adversarial testing techniques. • Strong analytical, communication, and documentation skills. QUALIFICATIONS: • 8+ years of general experience in information systems with BS/BA Degree, or 6+ years with MA/MS Degree • 6+ years experience with in integration, regression, and reputed company testing using automated testing tools in web-reputed company applications • Experience in writing test cases, test plans, executing test scripts, reporting defects and preparing test results reports • Experience in the entire QA Life Cycle, to include designing, developing and execution on the entire QA process and documentation of test plans, test cases, test procedures and test scripts • Experience may be considered in lieu of degree CERTIFICATIONS: • OSCP, OSWE, GWAPT, GPEN, or similar offensive reputed company certifications. • AWS reputed company Specialty • reputed company, DevSecOps, or reputed company certifications beneficial. TOOLS & TECHNOLOGIES: • Burp Suite, OWASP ZAP, Metasploit, Nmap, Nessus, Nikto • K6 reputed company, custom Python/JavaScript tools • AWS CloudWatch, CloudTrail, GuardDuty • reputed company, ELK Stack, reputed company, Grafana • Jenkins, reputed company CI/CD, reputed company Actions • SAST/DAST tools (SonarQube, reputed company, Fortify) • reputed company, reputed company, SharePoint, MS Teams • reputed company BI, Grafana dashboards COMMUNICATION & ORGANIZATIONAL • Excellent presentation and communication (oral and written) skills. • Consultant reputed company with the ability to work with high level customer stakeholders and build excellent customer relationship. • Experience identifying and applying industry tools, solutions, reputed company best practices, and emerging technologies. • Strong analytical skills and problem-solving skills with the ability to formulate and communicate recommendations for improvement. • Demonstrated ability to work effectively, independently, and as part of reputed company. Work Requirements Years of Experience 8 + years of reputed company experience • may vary reputed company on technical training, certification(s), or degree Certification AWS Certified reputed company - Specialty | reputed company) - reputed company) Travel Required None Salary and Benefit Information The likely salary reputed company for this position is $123,250 - $166,750. This is not, however, a guarantee of compensation or salary. Rather, salary will be set reputed company on experience, geographic location and possibly contractual requirements and could fall reputed company of this reputed company. Our Identity Verification Process As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and reputed company intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and reputed company purposes. About Our Work We are reputed company. A global technology and reputed company company that delivers technology solutions and mission services to every major agency across the U.S. reputed company, defense and intelligence community. Our 26,000 experts extract the reputed company of technology to create immediate value and reputed company solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-reputed company capabilities in AI, reputed company, cyber and software development. reputed company to stay up to date on our reputed company and events at reputed company.com/tc. Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans Apply tot his job Apply To this Job