Red Team Penetration Tester

Join to apply for the Red Team Penetration Tester role at Sim Ventions
.

Sim Ventions, consistently voted one of Virginia's Best Places to Work, is looking for an experienced professional to join our team! As a Red Team Penetration Tester, you will be responsible for conducting penetration testing and offensive cybersecurity operations for the U.S. Government and DoD systems. You will work collaboratively with Blue Team and cybersecurity professionals to enhance overall cyber posture.

Negligible.

An ACTIVE Top Secret Clearance with SCI Eligibility is required for this position. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. US Citizenship is required to obtain a clearance.

• Five (5) years' experience in software engineering applied to program development, modeling, and simulation applied to DoD or Information Technology systems.
• Platforms:
  Linux and Windows.
• Strong working knowledge of common Penetration Testing (PENTEST) tools:
  Kali, Metasploit, NMAP, Cobalt Strike.
• Programming languages:
  Python, C, C#, C++, Go, Perl, Powershell.
• Web development/penetration testing:
  Web Dev, Web App Dev, Web Penetration testing.
• Networking and infrastructure: NSX, vCenter, vRealize Suite, Horizon View (VDI), PAN-OS, Fire Power, Nexus, IOS, ASA, ONTAP, Snap Mirror.
• Active Directory and Entra  (Azure AD), SSO, MFA, Azure application integration, Identity Federation.
• Automation:
  Powershell, Power Automate, Logic Apps, Graph API.
• Microsoft Entra  Microsoft 365 in a hybrid environment.
• Experience with Palo Alto, Cisco, VMWare, Net App, and Microsoft products.
• Experience with AWS services, cloud audit, serverless, and microservice architecture; understanding of security best practices for EC2, S3, KMS, RDS.
• Web Services penetration testing: RESTful and SOAP, authentication protocols (OAuth2, SAML, LDAP).
• Database and scripting: PHP, ASP, SQL, Java, HTML, No
  
  SQL.
• Minimum certification (choose one):
  Security+, CCNA Security, CySA+, GICSP, SSCP.
• Penetration tester certification (choose one):
  • Offensive Security Certified Professional (OSCP)
  • Offensive Security Certified Expert (OSCE)
  • Offensive Security Exploitation Expert (OSEE)
  • Offensive Security Wireless Professional (OSWP)
• SANS certifications (choose one):
  • SEC
    560 – Network Penetration Testing and Ethical Hacking (GPEN)
  • SEC
    542 – Web App Penetration Testing and Ethical Hacking (GWAPT)
  • SEC
    660 – Advanced Penetration Testing
  • SEC
    642 – Advanced Web App Penetration Testing (GXPN)
  • SEC
    564 – Red Team Operations and Threat Emulation
• OSD Sponsored Cyber Operation Academy Course (COAC) graduate.
• Capture the Flag (CTF) participation (DEFCON, Over-The-Wire, Hack the Box, USS Secure CTF).
• Security research resulting in a Common Vulnerabilities and Exposures (CVE).

• Debug and reverse engineer software.
• Analyze Windows Events, Linux syslog, boot logs, and dmesg logs.
• Program and debug Web applications (Java, Perl, Ada, C++, Tcl/Tk) and GUIs using Microsoft Visual Studio and Rational Clear Case.
• Recommend software modifications to mitigate known vulnerabilities; operate and administer systems including HP-UX, UNIX, Solaris, Linux, and Windows.
• Identify security flaws in compiled and source code; understand real‑time VxWorks and LynxOS, CORBA, firewalls, and network protocols.
• Implement NSA‑approved encryption technologies and devices; apply DISA STIGs.
• Apply virtual hosting and server technology; understand deceptive technology such as honeypots.
• Participate in code reviews; perform static source‑code analysis; author recommendations for improving software design.
• Contribute to a System Security Administrator and Operators Manual (SSAOM).

High School Diploma or GED equivalent.

The projected annual compensation range for this position is $90,000–$150,000 (USD), subject to experience, education, training, clearance, location, skills, and corporate compensation plan.

• Medical, dental, vision, and prescription drug coverage.
• Employee Stock Ownership Plan (ESOP).
• Competitive 401(k) programs.
• Retirement and financial counselors.
• Health Savings and Health…