Cloud Pentester

Key Responsibilities

• Conduct penetration testing, vulnerability assessments, and adversarial emulation activities against enterprise networks, operating systems, applications, virtualized environments, and cloud-based systems.
• Apply offensive cyber techniques, attack methodologies, and system exploitation approaches to identify and validate security weaknesses.
• Analyze network architectures, security controls, and system configurations to evaluate risk and identify potential attack paths.
• Perform security testing of Windows, Linux, virtualized, and enterprise computing environments, including hypervisors and supporting infrastructure.
• Assess and validate IT security architectures, technical designs, and system implementations to ensure compliance with cybersecurity best practices.
• Analyze assessment and testing results, develop risk mitigation strategies, and provide recommendations to improve overall security posture.
• Utilize network management, monitoring, and security assessment tools to support testing activities, reporting, and threat analysis.

Work Environment

• Location: On-site
• Travel Requirements: Minimal
• Working Hours: Standard

Qualifications

Required:

• Active TS/SCI with a Polygraph
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline. Additional relevant experience may be considered in lieu of a degree.
• Demonstrated experience conducting penetration testing, vulnerability assessments, or offensive cyber operations.
• Experience leveraging adversarial tactics, techniques, and procedures (TTPs) to evaluate system and network security.
• Experience applying cyber attack methodologies, exploitation techniques, and security testing frameworks.
• Working knowledge of cybersecurity principles, security controls, and operating system security for Windows, Linux, and virtualized platforms.
• Experience performing network security analysis, architecture reviews, and security control assessments.

Desired:

• Experience designing, implementing, or assessing enterprise security architectures.
• Experience evaluating complex Windows-based infrastructures, enterprise services, and system configurations.
• Experience testing or reviewing hypervisors, virtual environments, and enterprise computing platforms.
• Familiarity with major cloud service providers, cloud-native security concepts, and cloud architecture design.
• Experience developing risk management methodologies and translating technical findings into actionable mitigation plans.
• Hands-on experience with commercial and open-source penetration testing, vulnerability scanning, and network analysis tools.
• Relevant industry certifications such as OSCP, GPEN, CEH, CISSP, GCIH, or comparable cybersecurity certifications.

Pay

$190,500 to $232,800 annual salary. This range is for the Virginia area only. The offered rate will be based on the selected candidate's knowledge, skills, abilities and/or experience and in consideration of internal parity.

Benefits

KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.