Penetration Tester III
sosiAndrews Air Force Base (MD)
About the role
Company Description:
Founded in 1989, SOSi is among the largest private, founder-owned technology and services integrators in the defense and government services industry. We deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide.
Job Description
Overview:
SOSi is seeking a Penetration Tester III to support proactive cyber defense activities in alignment with our customer. This role is responsible for conducting penetration testing and red team activities, assessing security posture across enterprise environments, and supporting identification, validation, and reporting of vulnerabilities to improve cyber defense resilience.
Responsibilities:
- Conduct penetration testing across enterprise systems, applications, and network environments· Perform red team activities to evaluate security controls and identify exploitable weaknesses· Support continuous penetration testing activities to assess evolving threats and vulnerabilities· Conduct testing of IoT, mobile, and cloud environments· Support High Value Asset (HVA) security assessments· Apply testing methodologies and frameworks including MITRE ATT&CK, OSSTMM, OWASP, NIST, PTES, and ISSAF· Identify, document, validate, and report vulnerabilities and recommended remediation actions· Support cyber defense operations through coordination with security engineering, vulnerability management, and incident response teams
Qualifications
Experience: Five (5) to seven (7) years of penetration testing experience
Management or team lead experience Experience performing continuous penetration testingExperience conducting red team operations Experience performing IoT, mobile, and cloud penetration testingExperience supporting High Value Asset (HVA) assessments Experience applying MITRE ATT&CK, OSSTMM, OWASP, NIST, PTES, and ISSAF methodologies
Education: Bachelor's Degree
Certifications
Required: GPEN or GXPNCISA AES HVA Lead or Technical Lead, or ability to obtain
Plus one of the following: GRTPCRTLOSCPCRTPCMWAPTCEPTCPTLPT
Clearance/Suitability: Secret (active)
Additional Information
Work Environment:
Normal office conditions with potential to perform duties in deployed locations.
Core hours of operation are Monday through Friday, 0600 – 1700.May be requested to work evenings and weekends to meet program and contract needs.
Working at SOSiAll interested individuals will receive consideration and will not be discriminated against for any reason.
Summary
Type: Full-time
Function: Other
Experience level: Mid-Senior Level
Industry: Information Technology And Services
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
More like this