Senior Penetration Tester

The Senior Penetration Tester role at ASRC Federal Technology Solutions focuses on leading advanced security assessments while supporting strategy, automation, and technical guidance across a penetration testing program. This hybrid position is based in Washington, DC.

In this position, you will conduct hands-on penetration testing of systems and applications and lead assessment planning and execution. The role also includes mentoring a small team of junior penetration testers, running Purple Team exercises with customer sites, and contributing to secure systems operations, validation, and accreditation work.

• Hybrid: Washington, DC (3 days per week onsite)

• Salary: USD 155, per year

• Lead and perform advanced security assessments, including hands-on penetration testing of systems and applications.
• Identify vulnerabilities, evaluate risk, and provide clear, actionable remediation recommendations.
• Develop and maintain assessment plans aligned with NIST SP 800-53 and FedRAMP Cloud Security Controls
  .
• Execute security assessments according to defined plans and document findings accurately and promptly.
• Design, develop, and maintain tools and scripts to automate and enhance penetration testing activities.
• Manage and mentor a small team of junior penetration testers, providing technical guidance and training.
• Build and lead a Purple Team to support joint red/blue team exercises with customer sites.
• Support secure systems operations and maintenance, including security validation and accreditation activities.
• Analyze and mitigate system security threats across the lifecycle, including risk assessments and implementation of security engineering controls.
• Support compliance needs related to business continuity, operations security, insider threat detection, physical security analysis, and regulatory requirements.
• Communicate technical results effectively to technical teams and executive stakeholders.

• Education: Bachelor’s degree in a related field.
• Experience: 8+ years of relevant experience in cybersecurity and penetration testing (or an equivalent combination of education and experience).
• Clearance: Active DOE Q-Clearance or Top Secret (TS) equivalent required.

• OSCP (Offensive Security Certified Professional)
• OSCE (Offensive Security Certified Expert)
• CEH (Certified Ethical Hacker)
• CISSP (Certified Information Systems Security Professional)

• NIST SP 800-53
• FedRAMP Cloud Security Controls
• Linux
• Tenable Nessus
• Forescout
• Carbon Black
• Invicti
• Scythe
• Rubrik
• Fidelis

• Health care, dental, vision
• Life insurance
• 401(k)
• Education assistance
• PTO, holidays, and any other paid leave required by law