Jobs and Careers
AG
Penetration Tester / Threat Emulator
Agile DefenseWashington, United Statesfull_timeVerifiedPosted 26 Aug 2025
About the role
At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.
Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.
Requisition #: 1141Penetration Tester / Threat EmulatorNational Capital Region Clearance Level: Active DoD - TS/SCI
Required Certification(s):· One or more certifications: GCIA, GCED, GCFE, GCTI, GNFA, GCIH, CND, ECSA, OSCP, OSEE, OSCE, GCFA, GREM, CHFI· Offensive Security Certified Professional - OSCP (optional but preferred), Certified Ethical Hacker - CEH (optional);
SUMMARYThis program supports a federal government organization's "purple team" ops, providing comprehensive Computer Network Defense and Offense, Incident Response, and Threat Emulation support through monitoring, analysis, and replication of potential threat activity targeting the enterprise.
The Threat Emulation SME will perform activities related to assisting cyber security operations team members to advance organizational understanding over risks and potential exposures related to software, system, and network weaknesses using advanced security/pen testing and auditing methods.
Advanced Cyber Threat Emulation members also engage with senior leadership to identify, report, and perform real-world threat activity simulation attacks, such as those used by our nation’s adversaries, in order to train and measure the effectiveness of the people, processes, and technology used to defend Agency networks and systems. Analyzes for weaknesses in company systems. Devises tests and scenarios for various penetration tests. Documents results and communicates them to engineers and management. Provides recommendations for new technologies and system designs according to test results. Develops automated testing programs where possible and efficient.
JOB DUTIES AND RESPONSIBILITIES· Research and remain up to date with emerging threats and Threat Emulation methodologies.· Map Cyber Key Terrain and generate priority target lists.· Engage in project meetings to gain knowledge of changes to the infrastructure and information sources that will aid the Threat Emulation Team.· Conduct research on commercial and open-source tools that may address capability gaps in detecting and/or blocking malicious activity.· Be familiar with development of attack vectors, system and infrastructure reconnaissance, collection of open‐source intelligence, enumeration, and foot-printing of target networks and services.· Conduct in-depth analysis of computer network and host data to determine threat patterns and unusual behaviors to identify potential TTPs employed by adversarial APTs and identify related APT activities and malware within operational networks and systems.· Use TTPs to emulate real-world threats in order to train and measure the effectiveness of the people, processes, and technology used to defend environments.· Engage with other Agency offices to gain access to various information sources in support of Threat Emulation activities.· Review collected monitoring and defense information that will be used as inputs or indicators of abnormalities or malicious activity for threat simulation development.· Generate threat intelligence indicators during emulation operations as part of research and apply and fine tune them across the enterprise network.· Develop Python and PowerShell customized scripts, payloads, and system backdoor emulations to simulate attacker behavior within various stages of attack activity, detection evasions, lateral movements, or exfiltration attempts.· Utilize the Cyber Threat Framework (ODNI) and production of Threat Emulation findings in said format.· Provide reporting for and brief all threat emulation successes at the completion of each approved emulation operation, which may include write-ups and evidence discovered.· Provide recommendations on enhancing Threat Emulation capabilities.
QUALIFICATIONS Required Certifications· One or more certifications: GCIA, GCED, GCFE, GCTI, GNFA, GCIH, CND, ECSA, OSCP, OSEE, OSCE, GCFA, GREM, CHFI· Offensive Security Certified Professional - OSCP (optional but preferred), Certified Ethical Hacker - CEH (optional);Education, Background, and Years of Experience· Typically has a bachelor de
Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.
Requisition #: 1141Penetration Tester / Threat EmulatorNational Capital Region Clearance Level: Active DoD - TS/SCI
Required Certification(s):· One or more certifications: GCIA, GCED, GCFE, GCTI, GNFA, GCIH, CND, ECSA, OSCP, OSEE, OSCE, GCFA, GREM, CHFI· Offensive Security Certified Professional - OSCP (optional but preferred), Certified Ethical Hacker - CEH (optional);
SUMMARYThis program supports a federal government organization's "purple team" ops, providing comprehensive Computer Network Defense and Offense, Incident Response, and Threat Emulation support through monitoring, analysis, and replication of potential threat activity targeting the enterprise.
The Threat Emulation SME will perform activities related to assisting cyber security operations team members to advance organizational understanding over risks and potential exposures related to software, system, and network weaknesses using advanced security/pen testing and auditing methods.
Advanced Cyber Threat Emulation members also engage with senior leadership to identify, report, and perform real-world threat activity simulation attacks, such as those used by our nation’s adversaries, in order to train and measure the effectiveness of the people, processes, and technology used to defend Agency networks and systems. Analyzes for weaknesses in company systems. Devises tests and scenarios for various penetration tests. Documents results and communicates them to engineers and management. Provides recommendations for new technologies and system designs according to test results. Develops automated testing programs where possible and efficient.
JOB DUTIES AND RESPONSIBILITIES· Research and remain up to date with emerging threats and Threat Emulation methodologies.· Map Cyber Key Terrain and generate priority target lists.· Engage in project meetings to gain knowledge of changes to the infrastructure and information sources that will aid the Threat Emulation Team.· Conduct research on commercial and open-source tools that may address capability gaps in detecting and/or blocking malicious activity.· Be familiar with development of attack vectors, system and infrastructure reconnaissance, collection of open‐source intelligence, enumeration, and foot-printing of target networks and services.· Conduct in-depth analysis of computer network and host data to determine threat patterns and unusual behaviors to identify potential TTPs employed by adversarial APTs and identify related APT activities and malware within operational networks and systems.· Use TTPs to emulate real-world threats in order to train and measure the effectiveness of the people, processes, and technology used to defend environments.· Engage with other Agency offices to gain access to various information sources in support of Threat Emulation activities.· Review collected monitoring and defense information that will be used as inputs or indicators of abnormalities or malicious activity for threat simulation development.· Generate threat intelligence indicators during emulation operations as part of research and apply and fine tune them across the enterprise network.· Develop Python and PowerShell customized scripts, payloads, and system backdoor emulations to simulate attacker behavior within various stages of attack activity, detection evasions, lateral movements, or exfiltration attempts.· Utilize the Cyber Threat Framework (ODNI) and production of Threat Emulation findings in said format.· Provide reporting for and brief all threat emulation successes at the completion of each approved emulation operation, which may include write-ups and evidence discovered.· Provide recommendations on enhancing Threat Emulation capabilities.
QUALIFICATIONS Required Certifications· One or more certifications: GCIA, GCED, GCFE, GCTI, GNFA, GCIH, CND, ECSA, OSCP, OSEE, OSCE, GCFA, GREM, CHFI· Offensive Security Certified Professional - OSCP (optional but preferred), Certified Ethical Hacker - CEH (optional);Education, Background, and Years of Experience· Typically has a bachelor de
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s