Job Description

ClearFocus Technologies, a HUBZone certified company, is located in Leesburg, VA. We specialize in cybersecurity and support multiple government and commercial clients for a variety of missions. We value our clients, integrity and employees and believe a single person can make a difference!
We are seeking a Senior Penetration Tester for a Part-time opportunity. This opportunity requires travel to throughout the DMV area.

The Senior Penetration Tester serves as a technical lead supporting the Department of Health and Human Services (HHS) Office of Inspector General (OIG) Cyber Assessment Team. This position performs advanced penetration testing, vulnerability assessments, security research, exploitation activities, and technical consulting across federal systems, applications, cloud environments, and networks. The individual will lead testing engagements, provide expert recommendations to auditors and stakeholders, develop detailed technical reports, and assist with cybersecurity training initiatives.
Key Responsibilities:

Lead penetration testing engagements for web applications, external and internal networks, cloud environments, mobile applications, wireless networks, containers, and emerging technologies.
Conduct reconnaissance, enumeration, vulnerability analysis, exploitation, privilege escalation, persistence, and post-exploitation activities.
Develop and review Rules of Engagement (RoE) documentation and participate in planning meetings, entrance conferences, and results briefings.
Analyze vulnerability scan results and correlate findings from multiple tools to validate security weaknesses and eliminate false positives.
Provide expert technical consulting and security guidance to federal auditors and assessment teams.
Develop attack confirmation documentation, evidence collection packages, and technical recommendations for remediation.
Author formal penetration testing reports, conclusions memoranda, executive summaries, and technical findings.
Present complex technical findings to senior executives, IT management, and technical staff.
Participate in the design and delivery of hands-on cybersecurity training and live demonstrations.
Mentor junior penetration testers and review technical deliverables for quality and accuracy.

Required Qualifications

7+ years of hands-on penetration testing, red team, or offensive security experience.
Experience conducting federal, healthcare, or regulated-industry security assessments.
Ability to obtain and maintain a Tier 4 High Risk Public Trust clearance

Strong knowledge of:

Web application security
Active Directory security
Cloud security (AWS, Azure, GCP)
Network and wireless security
Mobile application testing
Social engineering methodologies
NIST SP 800-115 and cybersecurity assessment frameworks
Ability to communicate highly technical information to non-technical audiences.
Ability to obtain and maintain a Public Trust

About ClearFocus Technologies

ClearFocus® Technologies provides advanced cybersecurity services that secure our nation’s most sensitive assets. Our company provides Security Engineering, Security Operations and Security Assessments solutions which are augmented by our advanced capabilities including Cyber Threat Intelligence, Cyber Hunt, Cyber Deception, Adversary Emulation, Digital Forensics, and Threat Analytics. We have extensive experience implementing Risk Management Framework (RMF) and Zero Trust processes; protecting Industrial Control Systems; and designing, operationalizing and staffing Security Operations Centers (SOCs). ClearFocus is approved for all five GSA Highly Adaptive Cybersecurity Services (HACS) subcategories, and we are an ISO 9001:2015, ISO 20000-1: 2018, ISO 27001: 2022, CMMI-SVC ML 2 and SBA Certified HUBZone company supporting the missions of 22 federal agencies and over 30 commercial clients.

Industry

Unknown

Company Size

11-50 employees

Headquarters

Leesburg, VA

Year Founded

2012

Website

clearfocustech.com

Social Media