Sr Penetration Tester

Overview

Silotech Group provides Advanced Cyber Solutions, Intelligence Solutions, Enterprise/Cloud IT Services and Products, and Managed IT/Security Services to Federal, State, and Commercial clients. We provide Federal Government and Commercial clients with customized, agile technical solutions focused on data, enterprise platforms, service engagement, and customer workforce development through trust-driven and collaborative relationships. Our vision is to help customers achieve their most challenging goals by unifying innovation, integrity, and exemplary services and products. We also develop advanced AI-driven capabilities supporting mission-critical government and enterprise environments. Our AI systems Aiden and Liam are next-generation, agentic AI platforms designed to reason, act, and collaborate across secure operational domains.

The Senior Penetration Tester will serve as the senior offensive security operator who independently executes application/network/wireless penetration testing, produces high-quality assessment reporting, and drives mitigation verification to measurably reduce risk.

Location

Off-site.

Clearance

DOD Secret; eligible for IT-I Critical Sensitive / Tier 5 (T5) upon assignment (recruit for current Secret holders and T5-eligible).

Essential Role and Responsibilities

• Independently perform penetration testing of applications, systems, and enclaves; identify security flaws and devise mitigation strategies; coordinate with internal/external system owners.
• Execute application and network pen tests and wireless security assessments; apply offensive techniques and produce prioritized risk recommendations to improve enterprise posture.
• Produce professional reports that clearly describe findings, evidence, exploitability, and recommended mitigations; support re-test/validation to confirm mitigation effectiveness.

Qualifications

Experience

• 6+ years proven proficiency performing vulnerability assessment and penetration testing.
• 3+ years experience with tools including Nessus, Metasploit, Canvas, Nmap, Burp Suite, Kismet.
• 3+ years network vulnerability assessment/penetration methods and 3+ years writing testing assessment reports.
• Admin/troubleshooting: Windows Server/IIS (2+ years) and Linux (2+ years); TCP/IP/network architecture knowledge; PCI DSS testing experience (2+ years).
• Scripting ability (Perl/Python/Ruby/Bash/Java) and knowledge of OWASP/open testing standards; strong written/oral communication skills.

Required Certifications

• Pen test certification such as LPT, CEPT, CEH, or GPEN.

Education

• Bachelor's in CS/Cybersecurity/IT or equivalent experience.
• Preferred: formal offensive security training; applied exploitation coursework.

Equal Opportunity Employer Statement

Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities.