Penetration Tester - Cyber Engineer

Peraton is seeking a Junior Penetration Tester and Cyber Engineer to support in-depth security assessments and analyses of sophisticated systems. This role is 100% on-site at Aberdeen Proving Ground, MD.

Location

Aberdeen Proving Ground, MD (onsite)

Compensation

USD 104,000 - 166,000 per year. Salary is determined based on factors such as role scope, responsibilities, experience, education, knowledge, skills, competencies, and geographic location, along with business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Summary

Perform in-depth assessments and analyses of sophisticated systems using penetration testing and threat-hunting techniques. The position is 100% on-site in Aberdeen Proving Ground, MD.

Responsibilities

• Conduct in-depth assessments and analyses of sophisticated systems using penetration testing and threat-hunting techniques.

Requirements

• Active Secret Clearance with the ability to obtain TS/SCI
• US Citizenship
• Experience requirement: 5 years with BS/BS; 3 years with MS/MA; 0 years with PhD
• Professional experience in penetration testing or threat hunting
• Proven ability in grey and black box penetration testing
• In-depth understanding of OWASP Top 10, DoD, NSA, or industry-standard Vulnerability and Penetration Testing Standards
• Proficiency with penetration testing tools such as nmap, Wireshark, Burp Suite, Nessus, and similar utilities
• Extensive knowledge of Linux operating systems
• Expertise in exploitation techniques including buffer overflows, fuzzing, SQL injection, Man-in-the-Middle attacks, covert channels, secure tunneling, XSS, privilege escalation, and lateral movement
• Strong grasp of networking, TCP/IP, virtualization, and web services
• Familiarity with interfacing with electronic hardware (for example, taking apart devices and identifying hardware components)

Technologies

• nmap
• Wireshark
• Burp Suite
• Nessus
• Linux
• OWASP Top 10
• TCP/IP
• buffer overflows
• fuzzing
• SQL injection
• Man-in-the-Middle attacks
• covert channels
• secure tunneling
• XSS
• privilege escalation
• lateral movement

Desired

• Active TS/SCI
• Certifications such as OSCP, OSCE, GPEN, GWAPT, GXPN, CEH, or CISSP
• Experience in malware analysis or digital computer forensics
• Scripting skills in Bash, Python, Perl, or Ruby
• Systems programming experience
• Keen interest in emerging penetration testing technologies and techniques
• Familiarity with Android operating systems
• Knowledge of UAS/UXS technologies
• Understanding of radios and radio protocols
• Experience analyzing embedded devices
• Development and presentation of proof-of-concepts to demonstrate exploitation techniques

Benefits

• Medical
• Dental
• Vision
• Life
• Health savings account
• Short/long term disability
• EAP
• Parental leave
• 401(k)
• Paid time off (PTO) for vacation
• Company paid holidays

Application Process and Notes

• The application period is estimated to be 30 days from the job posting date.
• By applying, candidates express interest in the role and the company.
• During application review, candidates may be required to participate in an on-camera interview and a process to verify identity.
• Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization.
• All interview responses must be the candidate’s own.

EEO Statement

Peraton is an equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.