General Dynamics

1 week ago

Penetration Tester

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 13 hours agoStatus: Live

Job Summary

Conduct hands-on security, penetration, and vulnerability assessments for CMM applications before ATO submission. Perform application, API, web/mobile, microservices, and AWS cloud penetration testing; validate NIST 800-53 controls and support RMF Step 3 evidence. Use tools and automated scanning to identify weaknesses, execute exploitation and analysis (credentialed and uncredentialed), document findings with remediation guidance, and coordinate with Agile DevSecOps teams for retesting and closure.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Perform application, API, and cloud penetration tests on CMM systems prior to ATO submission.
•Conduct web, mobile, API, and microservices security testing and perform credentialed/uncredentialed scans, privilege escalation, and lateral movement analysis.
•Execute AWS cloud penetration testing within approved boundaries (IAM, S3, Lambda, API Gateway, ECS/EKS, networking).
•Validate NIST 800-53 controls and support RMF Step 3 activities by providing evidence for ATO packages.
•Track findings, document exploitation steps and proof-of-concepts, prepare SAR/pen test summaries, and collaborate with engineering teams to remediate and retest vulnerabilities.

Pay and Benefits

Salary: USD 123,250 - 166,750 annually

Perks:Health InsuranceDentalVision401kPaid LeaveParental Leave

Key Requirements

•8+ years of experience in penetration testing, application security, or ethical hacking security roles.
•Hands-on penetration testing experience across web applications, APIs, microservices, and cloud environments.
•Strong proficiency with tools such as Burp Suite, OWASP ZAP, Metasploit, Nmap, Nessus, Nikto, K6 Security, or custom scripts.
•Experience testing applications built with NodeJS, ReactJS, REST APIs, and microservices.
•Strong understanding of AWS security and federal security frameworks/processes such as NIST 800-53, RMF, FedRAMP, or federal ATO processes.

Experience:8+ yearsPenetration testingApplication securityEthical hackingDevSecOpsCloud security

Skills:AnalyticalProblem-solvingCommunicationDocumentationCollaboration

Certifications:OSCPOSWEGWAPTGPENAWS Security SpecialtySAFeDevSecOpsAgile

Tech Stack:ReactNodeJSAWSMicroservicesRESTBurp SuiteOWASP ZAPMetasploitNmapNessusNiktoK6 SecurityPythonJavaScriptCloudWatchCloudTrailGuardDutyDatadogELK StackPrometheus

Company Brief

General Dynamics

Provides IT, systems engineering, cybersecurity, cloud, and mission support services to U.S. federal civilian and defense agencies, delivering large-scale technology solutions and managed services for national security and government operations.

Industry: Defense Technology

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Headquarters: Tysons / Fairfax, United States

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

General Dynamics

1 week ago

Penetration Tester

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 13 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Perform application, API, and cloud penetration tests on CMM systems prior to ATO submission.
•Conduct web, mobile, API, and microservices security testing and perform credentialed/uncredentialed scans, privilege escalation, and lateral movement analysis.
•Execute AWS cloud penetration testing within approved boundaries (IAM, S3, Lambda, API Gateway, ECS/EKS, networking).
•Validate NIST 800-53 controls and support RMF Step 3 activities by providing evidence for ATO packages.
•Track findings, document exploitation steps and proof-of-concepts, prepare SAR/pen test summaries, and collaborate with engineering teams to remediate and retest vulnerabilities.

Pay and Benefits

Salary: USD 123,250 - 166,750 annually

Perks:Health InsuranceDentalVision401kPaid LeaveParental Leave

Key Requirements

•8+ years of experience in penetration testing, application security, or ethical hacking security roles.
•Hands-on penetration testing experience across web applications, APIs, microservices, and cloud environments.
•Strong proficiency with tools such as Burp Suite, OWASP ZAP, Metasploit, Nmap, Nessus, Nikto, K6 Security, or custom scripts.
•Experience testing applications built with NodeJS, ReactJS, REST APIs, and microservices.
•Strong understanding of AWS security and federal security frameworks/processes such as NIST 800-53, RMF, FedRAMP, or federal ATO processes.

Experience:8+ yearsPenetration testingApplication securityEthical hackingDevSecOpsCloud security

Skills:AnalyticalProblem-solvingCommunicationDocumentationCollaboration

Certifications:OSCPOSWEGWAPTGPENAWS Security SpecialtySAFeDevSecOpsAgile

Tech Stack:ReactNodeJSAWSMicroservicesRESTBurp SuiteOWASP ZAPMetasploitNmapNessusNiktoK6 SecurityPythonJavaScriptCloudWatchCloudTrailGuardDutyDatadogELK StackPrometheus

Company Brief

General Dynamics

Industry: Defense Technology

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Headquarters: Tysons / Fairfax, United States

Website LinkedIn