Return To Search

Penetration Tester

Location: McLean, VA

Company: Revolutional, LLC

Category:

Job Description Apply Now

Penetration Tester

Location: Remote

Terms: Full-time

Clearance: Ability to obtain and maintain public trust as required

Project Description

This position supports cybersecurity operations and offensive security testing efforts for the Department of Veterans Affairs (VA). The role focuses on conducting time-based penetration testing activities that support the Authority to Operate (ATO) approval process for system owners across enterprise environments.

The environment includes modern web applications, APIs, cloud infrastructure, operating systems, databases, and network devices across both on-premises and cloud-hosted systems.

The core challenge: proactively identifying vulnerabilities and security weaknesses before adversaries can exploit them while supporting mission-critical healthcare and federal systems.

Position Description

As a Penetration Tester at Revolutional, you will proactively identify vulnerabilities across enterprise systems, applications, cloud infrastructure, and networks through structured offensive security assessments. You will support the full penetration testing lifecycle from reconnaissance and exploitation through reporting and remediation guidance.

This role requires cybersecurity professionals who can operate independently, think like an adversary, and deliver actionable security findings that improve the security posture of federal systems. You will contribute beyond task execution by developing testing methodologies, improving offensive security capabilities, and supporting advanced Red Team operations.

Responsibilities: 

• Perform time-based penetration testing against web applications, databases, APIs, network devices, operating systems, cloud environments, and infrastructure devices
• Conduct in-depth manual web application testing against modern frameworks and APIs to identify OWASP Top 10 vulnerabilities
• Perform assessments across on-premises systems and cloud infrastructure using advanced tactics, techniques, and procedures (TTPs)
• Utilize industry-standard offensive security tools to conduct automated vulnerability scans and manual security assessments
• Review newly published vulnerabilities and develop impact assessments for customer environments
• Analyze vulnerabilities and determine associated risks based on exploitability and operational impact
• Create clear, concise, and actionable reports to communicate findings, metrics, and remediation recommendations
• Generate automated and manual assessment reports and present findings to customers and stakeholders
• Develop new testing techniques, tools, scripts, and programs to enhance Offensive Security Team capabilities
• Maintain offensive security infrastructure, hardware, and software used for assessments and attack simulations
• Support information gathering, threat modeling, vulnerability analysis, exploitation, post-exploitation, and reporting activities
• Contribute to cybersecurity best practices, operational procedures, and reporting methodologies
• Support assessments that may require work outside standard business hours

Technical Environment

Operating Systems

• Kali Linux Suite
• Nessus (Tenable)
• Burp Suite Professional
• NMAP
• Windows
• Unix
• Linux

Security Practices

• Penetration Testing
• Vulnerability Analysis
• Threat Modeling
• Post Exploitation
• Red Team Operations
• Security Reporting

Scripting & Automation

• Bash
• PowerShell
• Security automation and scripting tools

Note: This role may include exposure to advanced offensive security operations including Red Teaming, malware analysis, EDR evasion techniques, and cloud security assessments.

What You Bring (Requirements):

• Baseline Requirements:
  • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (5 years of additional relevant experience may substitute for education)
  • 1-4 years of experience in IT functions such as network administration, systems engineering, or cybersecurity
  • 2-4 years of experience supporting offensive cybersecurity or penetration testing activities
  • Ability to obtain and maintain required federal clearance/public trust as needed
• Technical Capabilities:
  • Experience supporting Windows, Unix, and Linux operating systems
  • Experience conducting penetration testing using industry-standard offensive security tools 
  • Experience identifying and validating web application vulnerabilities and security weaknesses 
  • Experience with vulnerability scanning and manual security assessments
  • Ability to perform scripting and automation using Bash, PowerShell, or similar languages
  • Understanding of penetration testing methodologies, threat modeling, exploitation, and post-exploitation techniques
  • Ability to communicate technical findings clearly through written reports and customer briefings
• Core Strengths: 
  • Strong analytical and problem-solving skills
  • Ability to think critically and operate with an adversarial mindset
  • Strong ownership mindset and accountability for outcomes
  • Effective written and verbal communication skills
  • Ability to operate in fast-paced and mission-focused environments
  • Strong collaboration and teamwork skills

Nice to Have (Differentiators): 

• GIAC Web Application Penetration Tester (GWAPT) certification
• Offensive Security Certified Professional (OSCP) certification
• Certified Red Team Operator (CRTO) certification
• Experience utilizing AI-assisted tools, automation frameworks, or scripted solutions to enhance penetration testing and vulnerability analysis
• Experience with advanced Red Team operations including reverse engineering, malware development, command and control (C2), and EDR evasion techniques
• Experience supporting federal government cybersecurity programs

 

 

 

 

Apply Now