Penetration Testers - Senior (Lead) (,, United States)

Washington, District of Columbia, United States Company Overview : eTel delivers solutions for the federal government by securing and managing data, providing scalable identity access, modernizing legacy systems, and building high-performance platforms. The company serves the US federal government and other clients including the Treasury, Commerce, and State Departments. eTel emphasizes integrated CMMI Level 3 processes, ISO certifications (ISO 9001 : 2015, ISO / IEC 27001 : 2013, ISO / IEC 20000-1 : 2018), and access to dedicated SMEs and thought leaders. Security Clearance : Secret clearance (Mandatory). Candidates without active secret clearance will not be considered. May require eligibility for Top Secret due to classified threat intelligence. Responsibilities Lead SBAs penetration, offensive, and adversarial testing services, including gray / black box testing, red teaming, API testing, and DevSecOps code reviews. Develop and execute SBAs enterprise penetration testing strategy, including quarterly schedules and annual SOPs. Conduct continuous penetration testing, simulate threat actor attacks, and assess SOC detection effectiveness. Perform web, mobile, API, database, and network penetration tests, including OWASP Top 10 and API-specific testing. Conduct purple team exercises to emulate Advanced Persistent Threat (APT) tactics. Provide source code analysis, vulnerability scanning, phishing simulations, and exploitation assessments. Deliver findings, tactical remediation guidance, and strategic recommendations to strengthen SBAs security posture. Validate corrective actions through remediation verification testing. Prepare and deliver standardized penetration test reports (PTRs) and executive-level out-briefs. Required Qualifications Bachelors Degree in Computer Science, Information Technology, Cybersecurity, or a related field. Advanced degree preferred but not required. OSCP, GPEN, or equivalent penetration testing certification required. CISSP, CEH, or GXPN preferred. Minimum 810 years of penetration testing and offensive security experience in Federal or enterprise environments. Strong hands-on skills in exploitation frameworks, red team operations, static / dynamic code analysis, and phishing simulations. Proven ability to lead penetration testing engagements and report findings to both technical and executive stakeholders. Familiarity with threat intelligence-driven testing and integration with SOC operations. Location : Work will be primarily onsite at SBA locations in Washington, DC, or other designated sites. Remote work requires prior client approval. Local and occasional out-of-area travel may be required. Voluntary Self-Identification For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion is voluntary and will not affect hiring decisions. Information will be kept confidential and used in compliance with applicable laws. As a government contractor subject to EEO requirements, we do not discriminate on the basis of protected status. This section provides information for compliance, including categories related to veterans and disability status. Information collected is voluntary and used solely for affirmative action reporting. Disability Status Form CC-305, Page 1 of 1. OMB Control Number 1250-0005. Expires 04 / 30 / 2026. J-18808-Ljbffraa415a4b-8b21-40fc-a65c-70d2b25ca29a