Penetration Tester / Red Team Operator

Penetration Tester / Red Team Operator

Location: Bethesda, MD (Hybrid; On-site as Required)

Clearance: Tier 2 Public Trust (Required)

Employment Type: Full-Time

Position Summary

Digital Global Connectors (DGC) is seeking an experienced Penetration Tester / Red Team Operator to support a Federal information security program. The Penetration Tester is responsible for performing authorized security assessments that evaluate the effectiveness of technical, administrative, and operational security controls protecting enterprise information systems, cloud environments, applications, wireless networks, and supporting infrastructure.

This position conducts penetration tests, adversary emulation exercises, vulnerability exploitation, security validation, and red team assessments to identify weaknesses before they can be exploited by malicious actors. The Penetration Tester collaborates with Security Engineers, Security Architects, Threat Hunters, Incident Responders, ISSOs, System Owners, and program leadership to strengthen enterprise cybersecurity through proactive security testing and risk-based recommendations.

The successful candidate will possess extensive experience performing enterprise penetration testing, application security testing, network exploitation, and adversary simulation within complex enterprise environments.

Essential Duties and Responsibilities:

Penetration Testing

Conduct authorized internal and external penetration tests against enterprise systems.

Perform network, application, wireless, cloud, and infrastructure security assessments.

Validate vulnerabilities identified during automated vulnerability scans.

Identify exploitable weaknesses in enterprise environments.

Document attack paths and associated business risks.

Recommend remediation strategies to eliminate identified vulnerabilities.

Red Team Operations

Conduct adversary emulation exercises based on real-world threat actor tactics.

Simulate advanced persistent threat (APT) activities.

Evaluate the effectiveness of enterprise detection and response capabilities.

Test security monitoring, alerting, and incident response processes.

Coordinate red team activities with authorized stakeholders.

Support purple team engagements to improve defensive capabilities.

Web and Application Security Testing

Perform manual and automated web application security assessments.

Test for vulnerabilities consistent with the OWASP Top 10 and API Security Top 10.

Evaluate authentication, authorization, session management, and input validation.

Assess application programming interfaces (APIs) for security weaknesses.

Validate remediation of application vulnerabilities.

Document technical findings and business impacts.

Network Security Testing

Assess internal and external network security.

Evaluate firewalls, routers, switches, VPNs, wireless networks, and remote access solutions.

Test network segmentation and access controls.

Assess Active Directory security.

Evaluate identity and privilege escalation paths.

Validate network hardening measures.

Cloud Security Assessments

Perform security assessments of Microsoft Azure, Microsoft 365, Amazon Web Services (AWS), and hybrid cloud environments.

Evaluate cloud identity configurations and privileged access.

Test cloud networking and storage configurations.

Assess cloud-native security controls.

Identify cloud misconfigurations and excessive permissions.

Recommend improvements to cloud security architecture.

Security Assessment Tools

Utilize technologies including:

Kali Linux

Metasploit Framework

Burp Suite Professional

Nmap

Nessus

Tenable Security Center

BloodHound

Cobalt Strike (where authorized)

Impacket

Wireshark

OWASP ZAP

Microsoft Defender XDR

Microsoft Sentinel

PowerShell

Python

Security Information and Event Management (SIEM) platforms

Evaluate new tools and techniques to improve testing effectiveness.

Reporting and Documentation

Develop and maintain:

Penetration Test Reports

Executive Summary Reports

Technical Findings Reports

Risk Assessments

Remediation Recommendations

Red Team After-Action Reports

Attack Path Diagrams

Proof-of-Concept Documentation

Standard Operating Procedures

Lessons Learned

Ensure reports clearly communicate technical findings, business impacts, and recommended corrective actions.

Collaboration

Coordinate with Security Engineers, Security Architects, ISSOs, SOC Analysts, Threat Hunters, Incident Responders, System Owners, and Government stakeholders.

Support remediation planning and validation efforts.

Participate in security assessments and technical working groups.

Provide technical briefings to technical and executive leadership.

Mentor junior penetration testers when appropriate.

Continuous Improvement

Monitor emerging attack techniques, exploit methodologies, and threat actor tactics.

Evaluate new penetration testing tools and methodologies.

Recommend improvements to enterprise security testing capabilities.

Support purple team exercises and continuous security validation initiatives.

Maintain professional certifications and technical expertise.

Minimum Qualifications

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related discipline.

Minimum five (5) years of experience performing penetration testing, red team operations, or offensive cybersecurity assessments.

Experience performing network, web application, cloud, and infrastructure penetration testing.

Experience using industry-standard penetration testing tools and frameworks.

Familiarity with the OWASP Testing Guide, MITRE ATT&CK Framework, NIST SP 800-115, and Federal cybersecurity requirements.

Strong analytical, troubleshooting, technical writing, and communication skills.

U.S. Citizenship required.

Ability to obtain and maintain a Tier 2 Public Trust.

Preferred Qualifications

Master's degree in Cybersecurity, Computer Science, Information Assurance, Engineering, or a related discipline.

Experience supporting a Federal civilian agency.

Experience conducting cloud security assessments in Azure or AWS environments.

Experience supporting purple team or adversary emulation exercises.

Offensive Security Certified Professional (OSCP)

GIAC Penetration Tester (GPEN)

GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)

Certified Ethical Hacker (CEH)

CompTIA PenTest+

Certified Information Systems Security Professional (CISSP) (preferred)

Knowledge, Skills, and Abilities

Penetration Testing

Red Team Operations

Adversary Emulation

Purple Team Exercises

Ethical Hacking

Web Application Security

API Security Testing

OWASP Top 10

Network Security Testing

Cloud Security Assessments

Microsoft Azure

Amazon Web Services (AWS)

Microsoft 365 Security

Active Directory Security

Kali Linux

Metasploit Framework

Burp Suite Professional

Nmap

Nessus

Tenable Security Center

BloodHound

Cobalt Strike (authorized use)

Impacket

Wireshark

OWASP ZAP

Microsoft Defender XDR

Microsoft Sentinel

PowerShell

Python

MITRE ATT&CK Framework

NIST SP 800-115

Technical Documentation

Microsoft Office Suite

ServiceNow

Jira

Security Requirements

Ability to successfully obtain and maintain a Tier 2 Public Trust investigation.

Compliance with all applicable Federal security, privacy, ethics, and information assurance training requirements before receiving system access.

Ability to support authorized penetration testing engagements, scheduled maintenance windows, continuity of operations (COOP), emergency response activities, and surge support as required.

Must maintain strict confidentiality while handling assessment results, exploit methodologies, vulnerability data, system configurations, and Federal information systems.

Ability to conduct authorized offensive security assessments in a safe, controlled, and ethical manner while collaborating with Government stakeholders and technical teams to identify vulnerabilities, validate security controls, and improve the organization's overall cybersecurity posture.