Cybersecurity Test Engineer (Pentester)

We are looking for a driven, experienced Penetration Tester to join our dynamic team in Colorado Springs, CO. This role conducts authorized security assessments of Department of War (DoW) information systems, networks, applications, and cloud-hosted environments. You will identify, validate, and document security weaknesses, assess potential operational impact, and provide actionable remediation recommendations to system owners, developers, and cybersecurity stakeholders. Operating within approved rules of engagement and defined scope, you will work closely with cybersecurity teams to improve the confidentiality, integrity, availability, and resilience of defense systems and data. If you possess strong analytical thinking, exceptional technical aptitude, and effective communication skills, we want you on our team!

• Plan, coordinate, and execute authorized penetration tests and adversary-emulation activities against networks, cloud environments, operating systems, web applications, APIs, and other approved targets.
• Review assessment scope, objectives, rules of engagement, test windows, access requirements, and operational constraints prior to testing.
• Use manual and automated techniques (including Nmap, Burp Suite, Wireshark, Python, PowerShell, and Bash) to identify, validate, and prioritize vulnerabilities, misconfigurations, and weak controls.
• Conduct network reconnaissance, service enumeration, web application testing, vulnerability validation, and controlled exploitation within approved scope.
• Assess attack paths, privilege escalation opportunities, lateral-movement risk, and potential impact to mission systems while minimizing operational disruption.
• Collect, protect, and document assessment evidence in accordance with approved handling, retention, and reporting procedures.
• Prepare clear technical reports describing findings, affected assets, risk impact, supporting evidence, and recommended remediation actions.
• Brief technical and non-technical stakeholders on assessment results, risk implications, and remediation priorities.
• Collaborate with system owners, developers, security operations personnel, and engineers to validate remediation actions and improve defensive controls.

• Colorado Springs, CO / Peterson AFB, CO (Up to 25% travel required)

• 5+ years of relevant cybersecurity experience, including 2+ years conducting authorized penetration testing or equivalent adversary-emulation, vulnerability-validation, or security-assessment activities.
• Bachelor’s degree in Computer Science, Cybersecurity, IT, Engineering, or equivalent combination of education, training, and experience.
• Must meet DoD 8140.03 / 8570.01-M requirements for Vulnerability Assessment Analyst or Exploitation Analyst work role (or obtain qualifying certification within 6 months of hire).
• Demonstrated knowledge of network protocols, enterprise operating systems, identity services, web application security, vulnerability management, and penetration-testing methodology.
• Proficiency with security-testing tools and scripting languages (Nmap, Burp Suite, Wireshark, Python, PowerShell, Bash).
• Knowledge of AI and Machine Learning security risks, including OWASP Top 10 for LLMs (prompt injection, training data poisoning, model evasion) and methods to audit AI pipelines.
• Active DoD SECRET security clearance with the ability to obtain/maintain TOP SECRET / SCI if required.
• U.S. Citizenship.

• Relevant penetration-testing certification, such as OSCP+, OSED, OSWE, CPTS, GPEN, or comparable credential.
• Master’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or related field.
• Demonstrated experience leading assessment planning, reporting, stakeholder briefings, and remediation validation.

• Generous 401(k) contribution, matching not required
• Company Paid Health Insurance
• Company Paid Dental insurance
• Company Paid Vision Insurance
• Company Paid Life Insurance
• Paid Training
• Home Office Stipend
• Paid Time Off