Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted yesterday

Mid-Level Penetration Tester

SAIC1,036 open roles

Where
Remote Work, TX, United States
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowMid-Level Penetration TesterSAIC · Remote Work, TX, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SAIC's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.8% of postings close within 7 days. Measured by our own scanner across the market. SAIC postings stay open a median of 14 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.8%7 days
  4. 22.3%14 days
  5. 37.8%30 days
  6. 59.0%60 days
This job: posted yesterday

SAIC median: 14 days open

The posting

Job Description

Science Applications International Corporation (SAIC) is seeking a Mid-Level Penetration Tester to join our offensive security practice supporting major state and local government customers. This role is ideal for a cybersecurity professional with hands-on penetration testing experience who can independently conduct security assessments, identify vulnerabilities, and deliver actionable recommendations to clients. As a Mid-Level Penetration Tester, you will lead and support engagements involving web application, network, API, mobile, and infrastructure security assessments. You will work closely with clients, security engineers, and fellow testers to evaluate security controls, simulate real-world attack scenarios, and help organizations strengthen their security posture. The ideal candidate combines strong technical expertise with effective communication skills and a passion for offensive security. This position reports to the Security Assessments Manager.

Responsibilities

Assessment Execution

  • Independently perform penetration testing engagements against web applications, networks, APIs, mobile applications, wireless environments, and cloud-hosted systems utilizing both black-box and white-box methodologies.
  • Conduct testing activities aligned with NIST, OWASP, PTES, and industry-recognized security assessment frameworks.
  • Develop attack paths, validate vulnerabilities, and demonstrate exploitability while maintaining engagement objectives and timelines.

Engagement Leadership

  • Manage assigned testing engagements from planning and scoping support through execution, reporting, and customer debriefs.
  • Coordinate with senior team members, project managers, and clients to ensure successful assessment delivery.
  • Provide technical guidance and mentorship to junior team members when appropriate.

Reporting and Analysis

  • Produce comprehensive technical reports that clearly communicate vulnerabilities, business impact, attack scenarios, and remediation recommendations.
  • Present findings to technical teams, management, and executive stakeholders.
  • Assist customers in understanding risk priorities and developing remediation strategies.

Advanced Security Testing

  • Conduct web application security assessments utilizing the OWASP Web Security Testing Guide (WSTG) and OWASP Top 10 methodologies.
  • Perform API security assessments involving REST, GraphQL, SOAP, and modern authentication mechanisms.
  • Conduct mobile application security testing on iOS and Android platforms.
  • Participate in source code reviews and secure code assessments as part of white-box testing engagements.

Tool Development and Research

  • Utilize commercial, government, open-source, and custom-developed security tools to identify, exploit, and validate vulnerabilities.
  • Develop and maintain scripts, utilities, and testing methodologies to improve assessment efficiency and effectiveness.
  • Evaluate emerging attack techniques, vulnerabilities, and security technologies, incorporating findings into team practices.

Client Engagement

  • Serve as a trusted advisor to customers by communicating technical findings in both technical and business-focused terms.
  • Present assessment outcomes and remediation guidance during customer briefings and readout sessions.
  • Build and maintain positive customer relationships through professional engagement delivery.

Continuous Improvement

  • Remain current on evolving threats, offensive security techniques, emerging vulnerabilities, and industry best practices.
  • Contribute to internal research projects, methodology enhancements, tool development initiatives, and knowledge-sharing activities.
  • Support cybersecurity capability growth aligned to the NICE Cybersecurity Workforce Framework.

Qualifications

Required Education and Qualifications

  • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; equivalency through relevant experience will be considered.
  • Ability to successfully pass a CJIS Criminal Justice background investigation and maintain CJIS eligibility throughout employment.
  • One or more industry-recognized penetration testing certifications preferred, such as:OSCP GWAPT PNPT GPEN OSEP OSWE PenTest+ eJPT/eCPPT

Required Experience

  • 5+ years of hands-on cybersecurity experience, including 2+ years conducting penetration testing or offensive security assessments.
  • Strong knowledge of web application security testing methodologies, including OWASP WSTG and OWASP Top 10.
  • Experience conducting authenticated and unauthenticated network penetration tests.
  • Proficiency with industry-standard testing tools, including Burp Suite Professional, Nmap, Nessus/Tenable, Metasploit, and similar platforms.
  • Experience identifying, exploiting, validating, and documenting security vulnerabilities.
  • Working knowledge of network protocols, operating systems, Active Directory, authentication mechanisms, and common enterprise architectures.
  • Experience creating professional technical reports and presenting findings to technical and non-technical audiences.
  • Knowledge of attack frameworks and methodologies, including MITRE ATT&CK, NIST, and PTES.
  • Strong analytical, troubleshooting, and problem-solving skills.

Preferred Experience

  • Experience conducting mobile application security assessments using tools such as Frida, Objection, MobSF, and ADB.
  • Experience assessing APIs, cloud environments (Azure, AWS, GCP), and containerized applications.
  • Source code review experience in languages such as Java, C#, Python, JavaScript, or Go.
  • Familiarity with red team operations, adversary emulation, and attack path analysis.
  • Experience with scripting or automation using Python, PowerShell, Bash, or similar languages.
  • Knowledge of cloud security architectures, digital forensics, malware analysis, or reverse engineering.
  • Experience mentoring junior penetration testers or leading portions of assessment engagements.
  • Participation in security research, bug bounty programs, Capture-the-Flag competitions, or public vulnerability disclosures.

About Us

SAIC® is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SAIC's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on SAIC's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    SAIC's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.