Cyber Penetration Tester Security Clearance

Position: Cyber Penetration Tester with Security Clearance
Cyber Penetration Tester

Location:

Arlington, VA (Hybrid)
Clearance:
Active Secret (Top Secret eligible)

Employment Type:

Full-Time

Position Overview ICS is seeking a skilled Cyber Penetration Tester to support a high-impact Federal Strategic Cyber Program within the Bureau of Diplomatic Security. This role will operate within a Red Cell Team environment, conducting advanced penetration testing, identifying vulnerabilities, and strengthening the security posture of mission-critical systems. This is a hybrid position based in Northern Virginia, requiring the ability to be onsite as needed.

Key Responsibilities
Perform and lead penetration testing activities across enterprise environments
Identify system vulnerabilities and provide actionable remediation recommendations aligned with NIST 800-53 controls
Present findings and risk assessments to system owners, engineers, and leadership
Support and maintain Red Cell infrastructure and testing environments
Develop or enhance tools to automate vulnerability discovery and exploitation
Guide and mentor junior penetration testers while leading engagements

Required Qualifications
Bachelor’s degree with 5+ years of Cyber/IT experience
(or Master’s with 3+ years; additional experience may substitute for degree)
Minimum 2+ years of hands-on penetration testing experience

Experience with Kali Linux
Proficiency with tools such as:
Nmap
Burp Suite
Metasploit

Experience with penetration testing methodologies:
NIST SP 800-115
PTES
ISSAF
OWASP Testing Guide
Ability to lead penetration testing engagements
U.S. Citizenship required
Active Secret clearance with ability to obtain Top Secret
Required Certifications (One or More)
Security+ CE
CEH
CySA+
GCIH / GCIA
CCNA Cyber Ops / Security
SSCP
Cloud+

Preferred Qualifications
Active Top Secret or TS/SCI clearance
Advanced certifications such as:
CISSP / CCSP / ISSEP
CASP+
OSCP / GXPN / PNPT / CPTS
Strong understanding of:
NIST Risk Management Framework (RMF) & A&A processes
Networking (TCP/IP, VPNs, firewalls, NAT)
Operating systems & system architecture
Encryption, hashing, and data protection

Experience with :
Active Directory exploitation (Kerberoasting, Golden Tickets, etc.)
Web vulnerabilities (XSS, SQLi, LFI, authentication flaws)
Cloud platforms (AWS, Azure, GCP)
Scripting/programming experience (Python, Bash, Power Shell, JavaScript)
About the Program This program supports the Bureau of Diplomatic Security’s Cyber & Technology Security Directorate, delivering mission-critical cybersecurity capabilities across:
Cyber Monitoring & Operations
Cyber Threat Investigations
Technology Innovation & Engineering Why Join ICS At ICS, you’ll help engineer the detection and response capabilities that defend mission-critical federal systems.

This role offers hands-on influence over how cyber threats are detected, analyzed, and neutralized—combining development, automation, and operational security in a high-impact national security environment.