This role pays less than
64%
of similar roles. Most pay
$131,000–$178,975
— the shaded band above.
At the midpoint, this role pays about
$142k
versus about
$155k
for comparable roles.
Based on 240 similar postings.
Employer
About Booz Allen Hamilton
Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting
Booz Allen Hamilton currently has
802 open roles
on FindRole.
Listed pay typically runs
$86,800–$198,000
across 783 roles with salary data.
Red Team Penetration Tester
As a Red Team Penetration Tester, you will protect and secure critical digital environments including US Navy computer systems, applications, servers, and networks. You will develop detailed test and assessment plans for remote and onsite security assessments while executing attack stages such as footprinting, scanning, enumeration, gaining access, and privilege escalation using various Tactics, Techniques, and Procedures. Your daily work involves performing packet-level analysis with Wireshark and tcp dump, conducting vulnerability scans, and performing physical security testing to bypass locks and badge readers. You will utilize tools like Kali, Metasploit, NMAP, and Cobalt Strike while working with Linux and Windows systems. The role requires expertise in software engineering, reverse engineering, and programming languages including PHP, ASP, SQL, Java, HTML, and NoSQL to identify inconsistencies within system documentation and security controls.
Develop detailed test and assessment plans for onsite and remote security assessments.
Execute attack stages including footprinting, scanning, enumeration, gaining access, and escalating privileges.
Identify system inconsistencies by comparing configuration data against Risk Management Framework artifacts and design specifications.
Perform packet-level analysis using Wireshark and tcp dump to identify malicious network traffic.
Conduct automated penetration tests on networks, applications, servers, wireless systems, and mobile technologies.
Perform physical security testing to bypass locks, badge readers, and other physical controls.
Debug and reverse engineer software to identify vulnerabilities.
What we're looking for
Must possess a Top Secret security clearance.
High school diploma or GED required.
IAT Level II per DoD 8570.01 or successor certification required.
5+ years of experience in software engineering for program development and modeling/simulation applied to DoD or IT systems.
Experience with penetration testing, red team operations, tool/software development, reverse engineering, and various programming languages like PHP, Java, and SQL.
Knowledge of Linux and Windows based systems.
Proficiency with common penetration testing tools such as Kali, Metasploit, NMAP, and Cobalt Strike.
Ability to obtain specific advanced certifications (e.g., OSCP, OSCE, OSEE, or SANS) within 3 months of hire date.
Red Teaming
Purple Teaming
Cobalt Strike
Sliver
Mythic
Active Directory
EDR) evasion
Docker
Python
Go
C#
C++
Reverse Engineering
Linux
Windows
Phishing
Social Engineering
Cloud Technologies