{"id":2425325,"url":"https://alion.io/job/attainx-it-security-specialist-penetration-tester","title":"IT Security Specialist - Penetration Tester","company":{"id":4781,"name":"AttainX","domain":"attainx.com","url":"https://alion.io/company/attainx","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Silver Spring, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":125000,"max":145000,"currency":"USD","period":"year","gross":null,"usd_annual":145000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Metasploit","optional":false},{"name":"Wireshark","optional":false},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-09-01T20:30:00Z","employer_posted_date":"2026-09-01","last_verified_at":"2026-10-20T02:20:00Z","board_verified":true,"closed_at":null,"days_open":48,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":48},"description":"Job Title: IT Security Specialist - Penetration Tester\nLocation: Hybrid (Reside within a commutable distance of Silver Spring, MD to work onsite as required)\nCitizenship: US Citizen\nSecurity Clearance: Moderate Public Trust\nAttainX, Inc. is in search of a highly energetic Penetration Tester to join our team on a cyber security program supporting our US federal government client.\nAre you a seasoned penetration tester with a passion for uncovering vulnerabilities and securing complex systems? We’re looking for a highly skilled and experienced professional with a minimum of 5 years of proven expertise in penetration testing and ethical hacking to join our team. In this role, you’ll take a hands-on approach to identify, exploit, and report security weaknesses across diverse environments, including AWS, Azure, and on-premises infrastructure. Your work will directly contribute to fortifying critical systems and protecting sensitive data from evolving cyber threats.\nIf you thrive in dynamic, high-stakes environments and excel at devising creative solutions to complex security challenges, we want to hear from you. Join us in our mission to build a safer digital future.\nQualifications and Education Requirements:\nBasic Qualifications:\nA minimum of 5 years of proven penetration testing and ethical hacking experience.\nHands-on experience in penetration testing across AWS, Azure, and On-Premise environments.\nAt least 5 years of recent experience (within the last 6 years) in applying IT security concepts, methodologies, principles, procedures and using industry-standard IT security tools (e.g. Burp Suite, Metasploit, Wireshark).\nAt least 5 years of recent experience (within the last 6 years) with enterprise architecture methodologies, concepts, procedures, principles, and tools.\nAt least 5 years of recent experience (within the last 6 years) in contingency planning and backup and recovery best practices and application of NIST guidance in this area.\nAt least 5 years of recent experience (within the last 6 years) in using technical testing tools (Tenable Security Center, ArcSight, IBM Big Fix, etc.).\nAt least 5 years of recent experience (within the last 6 years) in conducting penetration testing or the ability to bring in a penetration tester when required.\nAt least 5 years of performing assessments of Federal Information Systems using the Risk Management Framework.\nPossess at least one of the following Certifications or be able to Obtain within six (6) months of hire: \nCertified Information Systems Security Professional (CISSP).\nCertified Information Systems Auditor (CISA).\nGIAC Certified Incident Handler (GCIH).\nGIAC Systems and Network Auditor (GSNA).\nElectronic Commerce Council Certified Ethical Hacker (CEH).\nISC2 Certified in Governance, Risk and Compliance (CGRC).\nSecurity Certified Network Professional (SCNP).\nSecurity Certified Network Architect (SCNA).\nProficiency in handling multiple tasks concurrently. \nProficiency in project and time management.\nAbility to adjust to changing priorities.\nAbility to work in a cohesive team-oriented environment.\nMust be a US Citizen able to obtain and maintain a Moderate Public Trust.\nPreferred Qualifications:\nKnowledge of DOC, NOAA, and NWS IT security policies and implementation standards or those of similar sized organizations AND comprehensive understanding of NIST guidance toinclude NIST Special Publications and Federal Information Processing Standards.\nSelf-starter, highly motivated individual who adapts to a dynamic work environment.\nStrong attention to detail with an ability to operate effectively across multiple priorities.\nEducation / Experience:\nIdeal for candidates with 5-7 years of hands-on penetration testing experience who are looking to advance into intermediate-level roles.\nSkills:\nCyber Security, Penetration Tester\nDuties:\nWe are searching for Penetration Tester to support Security Assessment and Authorization initiatives for our Government client. Job duties include:\nProtocol analysis, vulnerability discovery and exploitation, post exploitation impact analysis, and physical security.\nHighly technical problem-solver who understands software architectures, security, communication protocols, virtualization, and hardware, and work with other engineers to the resolution of problems in design, development, and operations.\nPerform manual and automated firmware analysis on target devices.\nPerform pen tests, fuzzing and custom exploit attacks against client systems.\nReview deployment architectures, topologies and conops for compliance regulatory security mandates.\nProduce security reports suitable for submission to regulatory bodies.\nConduct hands-on technical testing beyond automated tool validation, including full exploitation and leveraging of access within multiple environments.\nConduct scenario-based security testing, or red teaming to identify gaps in detection and response capabilities of client end systems.\nConducting research and testing in support of client requirements.\nDesigning, implementation, and integration of security solutions.\nDesigning, development and support of the company’s line of technology products.\nAnalyzes information security systems and applications.\nRecommends and develops security measures to protect information against unauthorized modification or loss.\nFamiliar with a variety of the field’s concepts, practices, and procedures. \nRelies on experience and judgment to plan and accomplish goals. \nPerforms a variety of complicated tasks. \nNon-Essential Functions:\nGeneral Duty Requirements. \nWork Location:\nShall perform all functional and technical tasks remotely, hybrid work environment with occasional travel for client engagement, industry events, contract negotiations or at AttainX facility.\nAbout Us:\nAttainX Inc. is SBA Certified 8(a), Women Owned Small Business (WOSB), Economically Disadvantaged WOSB (EDWOSB), CMMI Level 3, ISO 9001:2015 certified QMS and Silver Level SaFe Partner. For more than 12 years, AttainX, Inc. has delivered emergent technologies, software products, and high-quality services that meet the needs of our Federal Government customers.\nThe last 4 years have shown significant company growth as we have increased our contracts portfolio and hold the “Best in Class” contract vehicles, GSA MAS and OASIS Small Business and 8(a) Pools 1, 2 and 3. In addition, we are prime on several Agency Specific IDIQ’s and BPA’s with the National Oceanic and Atmospheric Administration, Department of Energy, Navy, Health and Human Service and the Defense Intelligence Agency.\nAttainX is dedicated to quality and best practices for the services we provide. We understand our people are the key ingredient to ensuring our customers Mission and Goals are met with excellence.\nBenefits:\nWe are proud to offer competitive compensation and benefits packages to include paid vacation, medical, dental, vision, matching 401K plan, tuition/training reimbursement, and Long & Short-Term Disability.\nEEO Commitment:\nAttainX is an equal employment opportunity employer, we are committed to providing a workplace that is free from discrimination based on Title VII of the Civil Rights Act, VEVRAA and Section 503, or other status protected by applicable federal, state, local, or international law. These protections also extend to applicants.\nAccommodation:\nIf you are an individual with a disability and would like to request a reasonable workplace accommodation, please send an email to AttainX HR indicating the specifics of the assistance needed.\nPhysical Demands:\nSitting and working on a computer for long, continuous periods each day; effective communications by telephone, email, and face-to-face; standing, walking, and sitting; handling and feeling objects or controls; reaching; talking and hearing; lifting and/or moving up to 10 pounds; and specific vision abilities including close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust and focus.\nWork Environment: The noise level in the work environment is usually moderate.","description_format":"text","description_chars":8066,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["401k plan","Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Systems Integrators","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-13T07:34:32Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.328,"p_room":0.35,"age_days":47,"expected_fill_days":10,"reasons":["conf:2","velocity","win:tail"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":145000,"is_top_pay":false},"html_url":"https://alion.io/job/attainx-it-security-specialist-penetration-tester","json_url":"https://alion.io/job/attainx-it-security-specialist-penetration-tester.json","meta":{"generated_at":"2026-10-20T03:22:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3617,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4781},"rest":"https://alion.io/mcp/rest/get_company?id=4781"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fattainx-it-security-specialist-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fattainx-it-security-specialist-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fattainx-it-security-specialist-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/attainx-it-security-specialist-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fattainx-it-security-specialist-penetration-tester"}]}