George Consulting, LTD · 3 months ago
Senior Penetration Tester
George Consulting, LTD is seeking a Senior Penetration Tester that will lead advanced offensive security assessments in support of Department of Defense (DoD) cybersecurity missions. The role involves planning and executing penetration tests, identifying and exploiting complex vulnerabilities, providing strategic recommendations, and supporting RMF authorization activities.
ConsultingInformation TechnologyProject Management
Responsibilities
Lead and execute penetration testing engagements on DoD networks, systems, applications, and cloud environments
Identify, exploit, and validate vulnerabilities using manual and automated techniques
Develop and present proof-of-concept exploits demonstrating operational and mission impact
Produce detailed technical reports and executive briefings outlining findings and remediation recommendations
Support RMF and eMASS documentation, providing risk analysis and testing evidence
Advise system owners and cybersecurity teams on remediation strategies and defensive improvements
Mentor junior testers and contribute to red team methodology development
Stay current on adversary TTPs, emerging threats, and DoD cybersecurity standards
Able to work independently with limited direction and be self-motivated
Able to work with other contractor teammates and customers daily
Able to work closely with customers to ensure deliverables meet their expectations and arrive in a timely manner
Attend and actively participate in team meetings
Qualification
Required
Active DoD Secret clearance (TS/SCI preferred)
Bachelor's degree in Cybersecurity, Computer Science, or related field (or equivalent experience)
5+ years of penetration testing or offensive security experience, including leading engagements
Current DoD 8570.01-M IAT Level III or CSSP Analyst/Tester certification (e.g., CASP+, CISSP, CEH, OSCP, GPEN, GXPN)
Advanced proficiency with tools such as Kali Linux, Metasploit, Burp Suite, BloodHound, Cobalt Strike, Nmap, and Nessus
Strong knowledge of Windows/Linux systems, Active Directory, network protocols, and cloud/virtualized environments
Experience with DISA STIGs, HBSS/ACAS, and DoD cyber ranges
Familiarity with Zero Trust architectures and DoD cybersecurity reference models
Scripting or development skills in Python, PowerShell, or Bash
Experience with exploit development, reverse engineering, or ICS/SCADA testing
Prior support to major DoD program offices (e.g., NIWC, NAVAIR, PMA)
Experience mentoring or managing technical teams
Excellent written and verbal communication skills, including briefing senior leadership
Company
George Consulting, LTD
Established in 2003, George Consulting is a small business successfully supporting Department of Defense (DoD) and Department of Homeland Security (DHS) customers.