Job Requirements
Arlington, VA
Secret Polygraph not specified
Mid Level Career (5+ yrs experience)
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Cyber Penetration Tester
Location: Arlington, VA (Hybrid)
Clearance: Active Secret (Top Secret eligible)
Employment Type: Full-Time
Position Overview
ICS is seeking a skilled Cyber Penetration Tester to support a high-impact Federal Strategic Cyber Program within the Bureau of Diplomatic Security. This role will operate within a Red Cell Team environment, conducting advanced penetration testing, identifying vulnerabilities, and strengthening the security posture of mission-critical systems.
This is a hybrid position based in Northern Virginia, requiring the ability to be onsite as needed.
Key Responsibilities
Perform and lead penetration testing activities across enterprise environments
Identify system vulnerabilities and provide actionable remediation recommendations aligned with NIST 800-53 controls
Present findings and risk assessments to system owners, engineers, and leadership
Support and maintain Red Cell infrastructure and testing environments
Develop or enhance tools to automate vulnerability discovery and exploitation
Guide and mentor junior penetration testers while leading engagements
Required Qualifications
Bachelor’s degree with 5+ years of Cyber/IT experience
(or Master’s with 3+ years; additional experience may substitute for degree)
Minimum 2+ years of hands-on penetration testing experience
Experience with Kali Linux
Proficiency with tools such as:
Nmap
Burp Suite
Metasploit
Experience with penetration testing methodologies:
NIST SP 800-115
PTES
ISSAF
OWASP Testing Guide
Ability to lead penetration testing engagements
U.S. Citizenship required
Active Secret clearance with ability to obtain Top Secret
Required Certifications (One or More)
Security+ CE
CEH
CySA+
GCIH / GCIA
CCNA Cyber Ops / Security
SSCP
Cloud+
Preferred Qualifications
Active Top Secret or TS/SCI clearance
Advanced certifications such as:
CISSP / CCSP / ISSEP
CASP+
OSCP / GXPN / PNPT / CPTS
Strong understanding of:
NIST Risk Management Framework (RMF) & A&A processes
Networking (TCP/IP, VPNs, firewalls, NAT)
Operating systems & system architecture
Encryption, hashing, and data protection
Experience with:
Active Directory exploitation (Kerberoasting, Golden Tickets, etc.)
Web vulnerabilities (XSS, SQLi, LFI, authentication flaws)
Cloud platforms (AWS, Azure, GCP)
Scripting/programming experience (Python, Bash, PowerShell, JavaScript)
About the Program
This program supports the Bureau of Diplomatic Security’s Cyber & Technology Security Directorate, delivering mission-critical cybersecurity capabilities across:
Cyber Monitoring & Operations
Cyber Threat Investigations
Technology Innovation & Engineering
Why Join ICS
At ICS, you’ll help engineer the detection and response capabilities that defend mission-critical federal systems. This role offers hands-on influence over how cyber threats are detected, analyzed, and neutralized—combining development, automation, and operational security in a high-impact national security environment.
Location: Arlington, VA (Hybrid)
Clearance: Active Secret (Top Secret eligible)
Employment Type: Full-Time
Position Overview
ICS is seeking a skilled Cyber Penetration Tester to support a high-impact Federal Strategic Cyber Program within the Bureau of Diplomatic Security. This role will operate within a Red Cell Team environment, conducting advanced penetration testing, identifying vulnerabilities, and strengthening the security posture of mission-critical systems.
This is a hybrid position based in Northern Virginia, requiring the ability to be onsite as needed.
Key Responsibilities
Perform and lead penetration testing activities across enterprise environments
Identify system vulnerabilities and provide actionable remediation recommendations aligned with NIST 800-53 controls
Present findings and risk assessments to system owners, engineers, and leadership
Support and maintain Red Cell infrastructure and testing environments
Develop or enhance tools to automate vulnerability discovery and exploitation
Guide and mentor junior penetration testers while leading engagements
Required Qualifications
Bachelor’s degree with 5+ years of Cyber/IT experience
(or Master’s with 3+ years; additional experience may substitute for degree)
Minimum 2+ years of hands-on penetration testing experience
Experience with Kali Linux
Proficiency with tools such as:
Nmap
Burp Suite
Metasploit
Experience with penetration testing methodologies:
NIST SP 800-115
PTES
ISSAF
OWASP Testing Guide
Ability to lead penetration testing engagements
U.S. Citizenship required
Active Secret clearance with ability to obtain Top Secret
Required Certifications (One or More)
Security+ CE
CEH
CySA+
GCIH / GCIA
CCNA Cyber Ops / Security
SSCP
Cloud+
Preferred Qualifications
Active Top Secret or TS/SCI clearance
Advanced certifications such as:
CISSP / CCSP / ISSEP
CASP+
OSCP / GXPN / PNPT / CPTS
Strong understanding of:
NIST Risk Management Framework (RMF) & A&A processes
Networking (TCP/IP, VPNs, firewalls, NAT)
Operating systems & system architecture
Encryption, hashing, and data protection
Experience with:
Active Directory exploitation (Kerberoasting, Golden Tickets, etc.)
Web vulnerabilities (XSS, SQLi, LFI, authentication flaws)
Cloud platforms (AWS, Azure, GCP)
Scripting/programming experience (Python, Bash, PowerShell, JavaScript)
About the Program
This program supports the Bureau of Diplomatic Security’s Cyber & Technology Security Directorate, delivering mission-critical cybersecurity capabilities across:
Cyber Monitoring & Operations
Cyber Threat Investigations
Technology Innovation & Engineering
Why Join ICS
At ICS, you’ll help engineer the detection and response capabilities that defend mission-critical federal systems. This role offers hands-on influence over how cyber threats are detected, analyzed, and neutralized—combining development, automation, and operational security in a high-impact national security environment.
group id: 10176392