Application Penetration Tester at 631 Booz Allen Hamilton_United States — Chantilly, VA

Application Penetration TesterThe Opportunity:

Work with a wide variety of clients, including Fortune 100 companies, to validate security controls and incident response through offensive security operations, including application penetration testing. Perform web application security testing, network penetration testing, and cloud penetration testing. Develop comprehensive and accurate reports, and presentations for both technical and executive audiences. Conduct security testing lifecycles in Windows and *nix environments. Communicate findings and strategy to client stakeholders, including technical staff, executive leadership, and legal counsel. Perform innovative research and promote an environment of innovation and knowledge sharing. Apply security testing and penetration testing techniques and mindset to a wide range of projects, become part of a team of security enthusiasts that perform cutting-edge research, and promote an environment of innovation and knowledge sharing. Due to the nature of work performed within this facility, U.S. citizenship is required.

You Have:

• 1+ years of experience conducting application penetration testing
• Experience with scripting or coding in Python, Go, or Bash
• Experience working in a Windows environment and with Active Directory attack path enumeration
• Experience with C2 frameworks, including Cobalt Strike, Mythic, or Havoc
• Knowledge of network vulnerability assessments, web application security testing, network penetration testing, or red teaming
• HS diploma or GED

Nice If You Have:

• Experience working in a commercial environment, and with Burp Suite Professional
• Experience deploying infrastructure in cloud environments
• Bachelor's degree in CS or a related field
• BSCP, OSWA, OSWE, OSCP, CRTO, GPEN, GXPN, OSCE, or GWAPT Certification

Compensation

Identity Statement

Candidate AI Usage Policy

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination