Penetration Tester Senior

General Dynamics Information Technology is looking for a Senior Penetration Tester in Ashburn, VA (onsite) to support mission-critical cybersecurity operations. In this role, you will lead advanced penetration testing engagements, emulate real-world adversary behavior, and help drive vulnerability discovery, validation, and remediation through clear, actionable reporting. This position is based on BI Full 6C (T4) public trust and includes a salary range of USD 142, per year.

• Lead complex penetration testing engagements and provide guidance to junior and mid-level testers across scoping, tooling, exploitation techniques, documentation quality, and professional development.
• Plan test approaches, conduct advanced exploitation, and deliver detailed reporting that supports corrective actions for critical systems.
• Define objectives, rules of engagement, and test boundaries in partnership with system owners, ISSOs, engineering leads, and mission stakeholders.
• Create tailored test plans that align with system architecture, threat scenarios, and compliance requirements.
• Perform hands‑on testing across network
  , application
  , wireless
  , and enclave targets using modern red‑team methodologies to discover and validate exploitable weaknesses.
• Use industry tools and frameworks including Nmap, Nessus, Metasploit, Burp Suite, CANVAS, and Kismet to enumerate, exploit, and confirm vulnerabilities at scale.
• Develop proofs of concept, chained exploits, and post‑exploitation procedures that demonstrate realistic impact and help system owners prioritize remediation.
• Produce comprehensive technical reports with vulnerability descriptions, reproduction steps, affected assets, exploit evidence, and prioritized remediation recommendations for both engineering and executive audiences.
• Present findings, defend methodologies, and translate technical risk into mission‑aligned decisions during briefs and touchpoints.
• Partner with developers, system engineers, SOC, and risk teams to recommend mitigation strategies and validate fixes during retesting cycles.

• Minimum 5 years of offensive security or penetration testing experience, including leading complex assessments and delivering authoritative reports.
• Strong leadership and communication abilities.
• Advanced proficiency with penetration testing tooling and exploitation techniques for network, application, and wireless vectors.
• Strong technical writing and oral presentation skills that meet audit and executive communication standards.
• Ability to collaborate with technical and non‑technical stakeholders across federal and enterprise environments.
• U.S. Citizenship Required
  .
• Less than 10% travel
  .
• A degree in cybersecurity, computer science, information technology, or a related field is preferred.

• OSCP (highly valued)
• GIAC Penetration Tester (GPEN)
• CREST Registered Pen Tester (CRT)

• Preferred:
  Previous or Current CBP Background Investigation
  .
• Clearance level:
  None
  .
• Public trust:
  BI Full 6C (T4).
• Category:
  Cyber and IT Risk Management
  .
• Technologies:
  Nmap, Nessus, Metasploit, Burp Suite, CANVAS, Kismet
  .

• Virtual interviews require you to be on camera.
• The company reserves the right to take your picture to verify your identity and prevent fraud.
• You authorize the collection, processing, and use of your biometric data for identity verification and security purposes.