Penetration Tester

General Dynamics

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Bethesda, MD
Salary: $172,144–$232,900 / yr
Posted: 58 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $161k

This role $203k

$124k $245k

below market most similar roles pay here above market

This role pays more than 85% of similar roles. Most pay $137,250–$185,375 — the blue band above. At the midpoint, this role pays about $203k versus about $161k for comparable roles.

Based on 240 similar postings.

Employer

About General Dynamics

General Dynamics is a global aerospace and defense company offering a broad portfolio of products and services in business aviation, ship construction, land combat vehicles, and information technology. It serves customers in the U.S. government, allied governments, and a diverse array of commercial markets.

General Dynamics currently has 1377 open roles on FindRole.

Listed pay typically runs $124,093–$150,385 across 1184 roles with salary data.

Most-posted roles

View all roles at General Dynamics

At a glance

TL;DR · Penetration Tester

Role Posting Log in to save

The Penetration Tester - TS/SCI with Polygraph joins the Cyber and IT Risk Management team to conduct internal penetration testing and vulnerability assessments. This role involves manually exploiting and compromising operating systems, web applications, services, and databases to identify misconfigurations and compliance issues. You will examine results from web and OS scanners, perform static source code analysis, and write final reports defending findings with mitigation strategies. Key responsibilities include writing Rules of Engagement, Test Plans, and Standard Operating Procedures while providing security recommendations to developers and government stakeholders. Required skills include knowledge of NIST 800-53, Risk Management Framework, TCP/IP, DNS, and PKI. You will perform technical research to increase security defense mechanisms and improve Tactics, Techniques, and Procedures for better cyber threat protection within the intelligence community.

Skills

Penetration Testing Vulnerability Assessment Static Source Code Analysis NIST 800-53 Risk Management Framework TCP/IP DNS PKI identity, and access management Data Reporting Operating Systems Databases Security Reviews

What you'll do

Conduct internal penetration testing and vulnerability assessments on servers, web applications, web services, and databases.
Manually exploit and compromise operating systems, web applications, and databases to identify security flaws.
Examine results from web/OS scanners, various scans, and static source code analysis.
Identify vulnerabilities, misconfigurations, and compliance issues within the enterprise IT environment.
Write final reports detailing findings, risk levels, mitigation strategies, and technical references.
Author penetration testing Rules of Engagement (RoE), Test Plans, and Standard Operating Procedures (SOP).
Provide security recommendations and technical research to developers, system administrators, and senior government stakeholders.
Recommend improvements to the IC CISO for enhancing Tactics, Techniques, and Procedures (TTPs) for cyber threat protection.

What we're looking for

Must possess a Top Secret SCI with Polygraph security clearance.
Must be a US citizen.
Must have 8+ years of related experience.
Must have a Bachelor's degree in a related field, or a Master's degree with three years of experience.
Must have skills in data reporting, networks, and risk management.
CEH or CPT certifications (preferred).
Experience with NIST 800-53 and Risk Management Framework (preferred).
Knowledge of network protocols, identity management, and cybersecurity principles (preferred).

Save