Red Team Penetration Tester

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Virginia Beach, VA
Salary
$86,800–$198,000 / yr
Employment
Full-time
Posted
47 days ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $157k
This role $142k
$73k $211k
below market most similar roles pay here above market

This role pays less than 67% of similar roles. Most pay $133,375–$181,339 — the blue band above. At the midpoint, this role pays about $142k versus about $157k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Red Team Penetration Tester

The Red Team Penetration Tester will join a team dedicated to safeguarding U.S. Navy computer systems, applications, servers, and networks. The role involves developing detailed test and assessment plans for on-site and remote security assessments. Day-to-day responsibilities include carrying out attack stages such as footprinting, scanning, enumeration, gaining access, and network exploitation using various Tactics, Techniques, and Procedures. The tester will perform vulnerability scans, compliance checks, and packet-level analysis to identify inconsistencies within system documentation and security controls. Key technologies and tools include Kali, Metasploit, NMAP, Cobalt Strike, Wireshark, and tcp dump. Required skills encompass software engineering, reverse engineering, and experience with PHP, ASP, SQL, Java, HTML, and NoSQL. The work focuses on identifying malicious behavior and exploiting physical security vulnerabilities like locks and badge readers.

What you'll do

  • Develop detailed test and assessment plans for on-site and remote security assessments.
  • Execute attack stages including footprinting, scanning, enumeration, gaining access, and privilege escalation.
  • Identify system inconsistencies by comparing vulnerability scans and configuration data against RMF artifacts and design specifications.
  • Perform packet-level analysis using Wireshark and tcp dump to identify malicious network traffic.
  • Conduct penetration tests on networks, applications, servers, endpoints, and wireless/mobile technologies using automated tools.
  • Perform physical security testing to circumvent locks, badge readers, and other physical security controls.
  • Debug and reverse engineer software to identify vulnerabilities and develop exploits.

What we're looking for

  • HS diploma or GED.
  • DoD 8570.01 IAT Level II Certification.
  • 5+ years of experience in software engineering for program development and modeling/simulation for DoD or IT systems.
  • Experience in Penetration Testing, Red Team operations, PHP, ASP, SQL, Java, HTML, NoSQL, and tool/software development.
  • Knowledge of Linux and Windows-based systems.
  • Knowledge of common PENTEST tools such as Kali, Metasploit, NMAP, and Cobalt Strike.
  • Ability to debug and reverse engineer software.
  • Secret clearance.

More like this

Similar roles

Red Team Penetration Tester

Booz Allen Hamilton

Dahlgren, VA 4 days ago $86,800–$198,000
Penetration Testing Red Team Operations Metasploit NMAP Cobalt Strike Wireshark tcp dump Java PHP SQL No SQL HTML Linux Windows Reverse Engineering C2 Risk Management Framework (RMF) Group Policy Object’s (GPO WSUS
5+ yrs exp

Red Team Penetration Tester

Booz Allen Hamilton

Dahlgren, VA 48 days ago
Penetration Testing Red Team Operations Kali Metasploit NMAP Cobalt Strike Wireshark tcp dump Java PHP SQL No SQL HTML Linux Windows Reverse Engineering Risk Management Framework (RMF) Group Policy Object’s (GPOs WSUS
5+ yrs exp

Penetration Tester

Leidos

Huntsville, AL 56 days ago $87,100–$157,450
Penetration Testing Python Bash PowerShell AWS Azure GCP Metasploit Burp Suite Nmap OWASP Top 10 TCP/IP API Security REST SOAP GraphQL Vulnerability Assessment Cobalt Strike ScoutSuite Prowler Pacu
4+ yrs exp

Red Team Operator

Leidos

Springfield, VA 21 days ago $131,300–$237,350
Penetration Testing Red Teaming Kali Linux Metasploit Burp Suite Nmap Cobalt Strike Bloodhound Responder Tenable Nessus WebInspect Scuba AppDetective Python PowerShell Go Ruby Malware Analysis Payload Obfuscation
8+ yrs exp

Penetration Tester

Booz Allen Hamilton

Fort Meade, MD 118 days ago
Penetration Testing MITRE ATT&CK Linux Windows Network Security Analysis Traffic Analysis Java Ruby Python JavaScript Rust C Atomic Red Team Scythe Mandiant ASV AttackIQ Security Architecture

Penetration Tester

Booz Allen Hamilton

Herndon, VA 103 days ago
Penetration Testing Linux Windows Network Security Analysis Traffic Analysis Java Ruby Python JavaScript Rust C Artificial Intelligence OSCP CPTS EJPT GPEN