Penetration Tester

NexTech Solutions (NTS) is a team of experts and engineers who understand the challenges that organizations face in finding and implementing the best technologies and IT solutions to meet mission requirements. We work with our government customers in defense and civilian agencies to identify new technologies.

The Opportunity

NTS is seeking a motivated Junior to Mid-level Penetration Tester with a strong foundation in cybersecurity operations, vulnerability identification and managementwithin a government agency. The successful candidate will assist in evaluating the security posture of government systems through hands-on testing and analysis. You will help identify vulnerabilities in environments, applications, systems, and networks and support federal compliance efforts, contributing to the protection of mission-critical assets and infrastructure. This is a hybrid role with onsite presence in Tampa, FL.

Key Responsibilities

• Conduct end-to-end penetration tests of networks, applications, and systems to identify vulnerabilities and misconfigurations.
• Administer compliance-based and custom vulnerability assessments; provide reports with risk-based recommendations.
• Maintain knowledge of threat actors, zero-days, TTPs (Tactics, Techniques, and Procedures), and defensive countermeasures.
• Collaborate with system owners, ISSOs, and developers to address findings and verify remediations, act as a technical expert in briefings, stakeholder engagements, and incident reviews.
• Analyze vendor environments, tech stacks, and infrastructure using both public and proprietary tools, Identify, exploit, and document system vulnerabilities and configuration weaknesses.
• Perform threat emulation and threat hunting activities to assess cyber resilience.
• Provide clear, concise assessment reports with remediation guidance tailored to mission and compliance requirements.
• Use manual and automated testing techniques to validate initial findings and ensure comprehensive coverage.
• Contribute to the continuous development of our threat detection monitoring capabilities.
• Collaborate with internal teams to evolve assessment tactics, techniques, and procedures (TTPs).
• Support foreign infrastructure analysis to identify external risks or offshore data exposure.
• Engage in team-driven security roadmap development and process improvements, like red team exercises, social engineering engagements, and threat emulation scenarios as required.