Penetration Tester

Job Title:

Penetration Tester

Job Category:
Engineering

Time Type:
Full time

Minimum Clearance Required to Start: TS/SCI with Polygraph

Employee Type:
Regular

Percentage of

Travel Required:

None

Type of Travel:
None

Perform computer network evaluations to include penetration security assessments in a cybersecurity red team environment. Be part of a department with an expanding range of programs focusing on Cyber Operations, where you get to grow on and between programs with peers who are dedicated to advancing national security. Participate in fun team outings and team building events where you get to engage with your co‑workers and expand your career network.

We are a fun, engaging environment with a management team focused on growing your career and making you a part of our future. We offer bonus compensation plans that demonstrate you are appreciated for working on the program and being a part of our team. You'll get paid for cyber events and training, such as our Capture the Flag Events, Internal Research and Development opportunities as well as prepaid courses to nationally recognized certification courses to grow your career.

You can visit our landing page by accessing this site: VORPAL Jobs.

• Experience performing Red Team and Blue Team Operations.
• Certifications such as OSCP, OSCE, GPEN, GWAPT, GXPN, CEH, CISSP.
• Malware analysis or digital computer forensics experience.
• Cyber related Law Enforcement or Counterintelligence experience.
• Scripting (Windows/
  * nix), Bash, Python, Perl or Ruby; systems programming is a plus.
• Existing subject‑matter expert of advanced persistent threats and emerging threats.
• Proactive interest in emerging technologies and techniques related to penetration testing.
• Demonstrated real‑world experience performing grey and black‑box penetration testing.
• Understanding of and interest in common web application vulnerabilities like XSS, CSRF, command injection, SQLi, single sign‑on limitations, etc.
• Proficiency in one or more of the following:
  Power Shell Empire, Metasploit Framework, Cobalt Strike, Burp Suite, Canvas, Kali Linux, IPTables, Sysinternals, A/V evasion methodologies, exploit development.
• Solid working experience and knowledge of Windows operating systems (incl. Active Directory), Linux operating systems; ESXi or similar; mobile platforms are a plus.
• Solid understanding of networking, TCP/IP, virtualization and cloud/data‑center architecture.
• Strong familiarity with some of the following: OWASP Top 10, DoD and NSA vulnerability and penetration testing standards.
• Knowledge of exploitation concepts including phishing and social engineering tactics, buffer overflows, fuzzing, SQLi, MiTM, covert channels, secure tunneling and open‑source exfiltration techniques.
• Bachelor’s degree in a related field.
• Active TS/SCI with polygraph clearance.

This position is contingent on funding and may not be filled immediately. However, this position is representative of positions within CACI that are consistently available. Individuals who apply may also be considered for other positions at CACI.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high‑performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

CACI values the unique contributions that every employee brings to our company and our customers – every day. You’ll have the autonomy to take the time you need through a unique flexible time‑off benefit and have access to robust learning resources to make your ambitions a reality.

Together, we will advance our nation's most critical…