Red Team Penetration Tester

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Dahlgren, VA
Salary: $86,800–$198,000 / yr
Employment: Full-time
Posted: 2 days ago
Freshness: Confirmed live today
Nearby: 52 roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $159k

This role $142k

$73k $211k

below market most similar roles pay here above market

This role pays less than 68% of similar roles. Most pay $136,175–$181,902 — the blue band above. At the midpoint, this role pays about $142k versus about $159k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1744 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 900 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Red Team Penetration Tester

Role Posting Log in to save

The Red Team Penetration Tester will join the team to safeguard U.S. Navy computer systems, applications, servers, and networks. The role involves developing detailed test and assessment plans for on-site and remote security assessments. Day-to-day responsibilities include carrying out attack stages such as footprinting, scanning, enumeration, gaining access, and network exploitation using various Tactics, Techniques, and Procedures. The tester will perform vulnerability scans, compliance checks, and packet-level analysis to identify inconsistencies within system documentation and security controls. Key technologies and tools include Kali, Metasploit, NMAP, Cobalt Strike, Wireshark, and tcp dump. Required skills include software engineering, reverse engineering, and knowledge of Linux and Windows systems. The position addresses the technical problem of identifying and exploiting vulnerabilities across networks, web applications, mobile technologies, and physical security controls.

Skills

Penetration Testing Metasploit NMAP Cobalt Strike Wireshark tcp dump Java PHP SQL No SQL HTML Linux Windows Reverse Engineering C2 Risk Management Framework (RMF) Group Policy Objects (GPOs) WSUS

What you'll do

Develop detailed test and assessment plans for on-site and remote security assessments.
Execute attack stages including footprinting, scanning, enumeration, gaining access, and privilege escalation.
Identify system inconsistencies by analyzing vulnerability scans, compliance checks, and configuration data like GPOs and WSUS.
Perform packet-level analysis using Wireshark and tcp dump to identify malicious network traffic.
Conduct penetration tests on networks, applications, web applications, servers, endpoints, wireless, and mobile technologies.
Perform physical security testing to circumvent locks, badge readers, and other physical security controls.
Debug and reverse engineer software to identify vulnerabilities and develop exploits.

What we're looking for

High school diploma or GED.
Top Secret clearance.
IAT Level II DoD 8570.01 Certification.
5+ years of experience in software engineering applied to program development and modeling and simulation for DoD or IT systems.
Experience with penetration testing, red team operations, exploit/malware development, C2, reverse engineering, and bug bounties.
Proficiency in PHP, ASP, SQL DBs, Java, HTML, or No SQL.
Knowledge of Linux and Windows-based systems.
Knowledge of common penetration testing tools such as Kali, Metasploit, NMAP, and Cobalt Strike.
Ability to debug and reverse engineer software.
Ability to travel up to 25% of the time.
Ability to obtain an OSCP, OSCE, OSEE, OSWP, SANS, SEC560, SEC542, SEC660, SEC642, or SEC564 certification within 3 months of hire.

Similar roles

Red Team Penetration Tester

Booz Allen Hamilton

Dahlgren, VA 8 days ago

Penetration Testing Red Team Operations Metasploit NMAP Cobalt Strike Wireshark tcp dump Java PHP SQL No SQL HTML Linux Windows Reverse Engineering C2 Risk Management Framework (RMF) Group Policy Object’s (GPO WSUS

5+ yrs exp

Save

Red Team Penetration Tester

Booz Allen Hamilton

Dahlgren, VA 52 days ago

Penetration Testing Red Team Operations Kali Metasploit NMAP Cobalt Strike Wireshark tcp dump Java PHP SQL No SQL HTML Linux Windows Reverse Engineering Risk Management Framework (RMF) Group Policy Object’s (GPOs WSUS

5+ yrs exp

Save

Red Team Penetration Tester

Booz Allen Hamilton

Virginia Beach, VA 52 days ago $86,800–$198,000

Penetration Testing Metasploit NMAP Cobalt Strike Wireshark tcp dump Java PHP SQL NoSQL HTML Linux Windows Reverse Engineering C2 Risk Management Framework (RMF)

5+ yrs exp

Save

Penetration Tester

Leidos

Huntsville, AL 60 days ago $87,100–$157,450

Penetration Testing Python Bash PowerShell AWS Azure GCP Metasploit Burp Suite Nmap OWASP Top 10 TCP/IP API Security REST SOAP GraphQL Vulnerability Assessment Cobalt Strike ScoutSuite Prowler Pacu

4+ yrs exp

Save

Red Team Operator

Leidos

Springfield, VA 25 days ago $131,300–$237,350

Penetration Testing Red Teaming Kali Linux Metasploit Burp Suite Nmap Cobalt Strike Bloodhound Responder Tenable Nessus WebInspect Scuba AppDetective Python PowerShell Go Ruby Malware Analysis Payload Obfuscation

8+ yrs exp

Save

Penetration Tester

Booz Allen Hamilton

Fort Meade, MD 123 days ago

Penetration Testing MITRE ATT&CK Linux Windows Network Security Analysis Traffic Analysis Java Ruby Python JavaScript Rust C Atomic Red Team Scythe Mandiant ASV AttackIQ Security Architecture

Save