Peraton is currently seeking a Jr Cyber Penetration Tester to become part of our Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program.

Location: Rosslyn, VA. In this role, you will:

The DSCM program encompasses technical, engineering, data analytics, cyber security, management, operational, logistical and administrative support to aid and advise the DoS Cyber & Technology Security (CTS) Directorate. This includes protecting a global cyber infrastructure comprising networks, systems, information, and mobile devices all while identifying and responding to cyber risks and threats.

In this role, you will:

• Support the Penetration Testing (Red Cell) Team.
• Assess the current state of the customer’s system security by identifying all vulnerabilities and security measures.
• Help customer perform analysis and mitigation of security vulnerabilities.
• Perform and report on penetration testing of systems, including cloud, to satisfy the NIST 800-53 CA-8 security control and using methodologies that may include, NIST SP 800-115, Penetration Testing Execution Standard (PTES), and Information Systems Security Assessment Framework (ISSAF).
• Stay abreast of current attack vectors and unique methods for exploitation of computer networks. Provide support to incident response teams through capability enhancement and reporting.
• Assist in maintaining Red Cell infrastructure.
• Develop or modify tools that automate discovery or exploitation (e.g. bash, Python, JavaScript, PowerShell).

#DSCM

Required:

• Bachelor's degree and 2 years of related experience. An additional 4 years will be considered in lieu of the degree requirement.
• Basic understanding of networking and security principles.
• Experience with evaluating system security configurations.
• Understand common Web Application vulnerabilities like SQLi, XSS, CSRF, and HTTP Flooding.
• Experience with penetration testing tools such as Metasploit, Burp Suite, Nmap, etc.
• Fundamentals of network routing & switching and assessing network device configurations.
• Familiarity in evaluating findings and performing root cause analysis.
• Demonstrated ability to work alone and/or within a small group.
• Must have ONE of the listed certifications below: CCNA Cyber Ops, CCNA-Security, CEH, CFR, Cloud+, CySA+, GCIA, GCIH, GICSP, SCYBER.
• U.S. citizenship required.
• An active Secret security clearance.

Preferred:

• Active Top Secret or TS/SCI.