Red Team Penetration Tester

Overview

SimVentions, recognized as one of Virginia's Best Places to Work, seeks an experienced Red Team Penetration Tester. In this role, you will conduct penetration testing and offensive cybersecurity operations for U.S. Government and DoD systems. You will collaborate with Blue Team and Cybersecurity professionals to enhance overall cyber posture.

Travel: Negligible

Clearance

An ACTIVE Secret Clearance is required. An ACTIVE Top Secret Clearance with SCI Eligibility is preferred. Applicants will undergo a security investigation and must meet eligibility requirements for classified information access. US Citizenship is mandatory to obtain a clearance.

Requirements

• Five (5) years of experience in software engineering for program development, or modeling and simulation for DoD or Information Technology systems.
• Linux: Firm grasp with demonstrated knowledge.
• Windows: Foundational knowledge with a good understanding of enterprise networks.
• Strong working knowledge of common Penetration Testing (PENTEST) tools:
  • Kali
  • Metasploit
  • NMAP
  • Cobalt Strike
• Documented experience in at least one of the following areas:
  • Penetration Testing (PENTEST)
  • Red Team Operations
  • Tool/Software Development (exploits/malware, C2, reverse engineering, bug bounties)
  • Programming Languages: Python, C, C Sharp, C++, Go, Perl, Powershell
  • Web Development, Web Application Development, or Web Penetration Testing
  • Virtualization: NSX, vCenter, vRealize Suite, Horizon View (VDI) and others
  • Firewall/Networking: PAN-OS, FirePower, Nexus, IOS, ASA
  • Storage: ONTAP, SnapMirror
  • Identity Management: Active-Directory, Active Directory, SSO, MFA, Azure application integration, Identity Federation
  • Automation: Powershell, PowerAutomate, Logic Apps, Graph API
• Experience with Palo Alto, Cisco, VMWare, NetApp, and Microsoft products.
• Entra ID (Azure AD) experience, including:
  • Microsoft Entra ID and Microsoft 365 in a hybrid environment.
  • Extending or integrating on-premises AD with Entra ID.
  • Managing identity and access in Microsoft Entra ID.
• Experience conducting Red Team operations in an MDE environment.
• Experience with AWS, Cloud Audit, Serverless, and Microservice Architecture.
• Experience working with AWS services (e.g., EC2, S3, KMS, RDS) and relevant security best practices.
• Experience with Web Services penetration testing (RESTful and SOAP) and Web Authentication protocols (e.g., OAuth2, SAML, LDAP).
• Proficiency in PHP, ASP, SQL databases, Java, HTML, No SQL.
• Minimum certification from one of the following:
  • Security+
  • CCNA Security
  • CySA+
  • GICSP
  • SSCP
• Minimum certification as a penetration tester, possessing one of the following certificates:
  • Offensive Security Certifications:
    • Offensive Security Certified Professional (OSCP)
    • Offensive Security Certified Expert (OSCE)
    • Offensive Security Exploitation Expert (OSEE)
    • Offensive Security Wireless Professional (OSWP)
  • SANS Certifications:
    • SEC560 - Network Penetration Testing and Ethical Hacking (GPEN Certification)
    • SEC542 - Web App Penetration Testing and Ethical Hacking (GWAPT Certification)
    • SEC660 - Advanced Penetration Testing, Exploit Writing, and Ethical Hacking (GXPN Certification)
    • SEC642 - Advanced Web App Penetration Testing and Ethical Hacking
    • SEC564 - Red Team Operations and Threat Emulation
  • OSD Sponsored Cyber Operation Academy Course (COAC) graduate.
  • Capture the Flag (CTF) participation (DEFCON, Over-The-Wire (OTW), Hack the Box, USS Secure CTF's).
  • Security research resulting in a Common Vulnerabilities and Exposures (CVE).

Responsibilities

• Debug and reverse engineer software.
• Analyze Windows Events, Linux syslog's, boot logs, and dmesg logs.
• Program and debug Web 2.0, Java, Perl, Ada, C++, Tool Command Language (tcl/tk) scripts, and graphical user interfaces (GUIs) using Microsoft Visual tel and Rational ClearCase for software configuration management.
• Recommend software modifications to systems to mitigate known vulnerabilities.
• Operate and administrate computer systems running HP-UX, UNIX, Solaris, Linux, and Microsoft Windows.
• Identify security flaws in compiled and human-readable source code. Understand code utilizing real-time VxWorks and Lynx OS operating systems, Common Object Resource Broker Architecture (CORBA), firewalls, and networking protocols.
• Implement NSA approved encryption technologies and devices. Apply DISA Security Technical Implementation Guides (STIGs).
• Apply virtual hosting and server technology in system architectures. Understand and apply deceptive technology concepts such as honey pots in system architectures.
• Participate in Code Reviews. Perform Static Source Code Analysis. Author recommendations for improving software and code design.
• Contribute to a System Security Administrator and Operators Manual (SSAOM).

Education

High School Diploma or GED equivalent.

Compensation

The projected annual compensation range for this position is $110,000-$150,000 (USD). This estimate reflects the standard salary range and is one component of the total compensation package offered by SimVentions.

Benefits

SimVentions is dedicated to supporting the total well-being of employees and their families through comprehensive health and welfare plans, including:

• Medical, dental, vision, and prescription drug coverage
• Employee Stock Ownership Plan (ESOP)
• Competitive 401(k) programs
• Retirement and Financial Counselors
• Health Savings and Health Reimbursement Accounts
• Flexible Spending Accounts
• Life insurance, short- & long-term disability
• Continuing Education Assistance
• Paid Time Off, Paid Holidays, Paid Leave (e.g., Maternity, Paternity, Jury Duty, Bereavement, Military)
• Third-Party Employee Assistance Program offering emotional and lifestyle well-being services, including free counseling
• Supplemental Benefit Program

Why Work for SimVentions?

SimVentions offers a fun, family-friendly atmosphere where employee-owners are encouraged to imagine, create, explore, discover, and achieve great things together.

• Support Our Warfighters: Proudly provide relevant, game-changing solutions to the U.S. military.
• Drive Customer Success: Deliver innovative products and solutions, fostering growth, voice, and impact for team members.
• Get Involved in Giving Back: Diverse service opportunities offered throughout the year.
• Build Innovative Technology: Work on cutting-edge technology with a direct impact on customer success.
• Work with Brilliant People: Join experienced, creative individuals passionate about their work.
• Create Meaningful Solutions: Solve challenging and meaningful requirements as trusted partners with customers.

Additional perks for SimVentions employees include:

• Employee Ownership: Contribute to building your company.
• Family Focus: Work with a team that values family time.
• Culture: Enhance a culture of technical excellence and collaboration.
• Dress Code: Business casual for comfort.
• Resources: Access excellent facilities, tools, and training for professional growth.
• Open Communication: Work in an environment where your voice is heard.
• Corporate Fellowship: Opportunities for company sports teams and employee-led interest groups.
• Employee Appreciation: Enjoy multiple corporate events, including Holiday Events, Company Picnic, and Imagineering Day.
• Founding Partner of the FredNats Baseball Team: Equitable distribution of tickets for home games from a private suite.
• Food: Abundant food available.