Application Security-Penetration Tester

About the role

Boston Government Services, LLC. (BGS) is seeking an Application Security‑Penetration Tester to support clients across the United States. BGS provides engineering, technology, and security services for government programs, national laboratories, national security facilities, nuclear operations, and complex projects.

Responsibilities

• Conduct application, infrastructure, and network security testing to identify exploitable vulnerabilities, validate security controls, and provide actionable recommendations.
• Develop and maintain penetration testing rules of engagement, test plans, and documentation.
• Perform reconnaissance, enumeration, target assessment, vulnerability validation, exploitability analysis, and evidence collection.
• Use approved commercial and open‑source tools to identify and validate vulnerabilities.
• Prepare draft and final penetration test reports with findings, evidence, access paths, risks, and recommendations.
• Coordinate kickoff meetings, stakeholder approvals, debriefs, validation testing, and reporting timelines.
• Identify systemic trends across findings and support security posture improvement recommendations.

Requirements

• Bachelor’s degree or equivalent.
• Experience conducting penetration tests, vulnerability assessments, application security testing, or technical security assessments.
• Familiarity with rules of engagement development, test planning, exploitability validation, vulnerability scanning, web application security, network testing, and report writing.
• Knowledge of OWASP, NIST, CVSS, secure configuration, and common attack techniques.
• Ability to communicate findings clearly to technical and non‑technical stakeholders.
• U.S. citizenship, successful drug screening, and eligibility to obtain and maintain a security or clearance badge.

Preferred Qualifications

• OSCP, GPEN, GWAPT, PenTest+, CEH, CISSP, or equivalent certifications.

Location / Work Arrangement

This position may be fully onsite or hybrid/remote depending on the needs of the specific contract.

Schedule

Full‑time, Monday – Friday, 40‑hour week with 4/10 or 9/80 schedules; on‑call or overnight shifts may be required depending on contract needs.

Benefits

• Health, dental, vision, and life insurance.
• Paid vacation.
• 401(k) retirement plan.
• Long‑ and short‑term disability coverage.

Compensation

Typical salary ranges between $170,167 – $200,196 annually, commensurate with experience and geographic location.