Systems Engineer III, Cybersecurity Penetration Tester

Systems Engineer III (Cybersecurity Penetration Tester)
 FLSA Status: Exempt
 Full-Time
 Location: Greater Atlanta (Hybrid- once a week to Norcross, GA office)

WHO WE ARE:
 MGT is a leading provider of technology and advisory solutions serving state, local, and education government agencies (SLED) across the United States. Through client partnerships, MGT’s almost 1,200 employees impact communities for good by managing and securing critical networks, solving complex human capital and fiscal problems, elevating education systems, and advancing equity as a performance imperative. MGT partners with thousands of agencies as a trusted advisor, delivering solutions that improve technology, operational, and economic performance to help communities thrive.

Founded in 1975, MGT initiated an ambitious restart in 2016, broadening the solutions portfolio to provide the most specialized solutions, tackling the most mission-critical problems that live at the top of the public agency leadership agenda. MGT drives over 20% compound annual organic growth and utilizes programmatic mergers and acquisitions to grow capabilities, attract top talent, and accelerate growth scale. Since 2020, MGT has successfully completed 13 acquisitions, driving over 60% compound annual inorganic growth.

Celebrating its 50th year in 2025, the firm attracts exceptional talent and empowers them to exceed client expectations as they navigate the dynamic demands of the clients we serve. Hear more about MGT’s culture in the words of our https://www.mgt.us/careers/.

WHAT YOU’LL DO:
 The Systems Engineer III, Cybersecurity Penetration Tester, is responsible for planning, executing, and leading complex security assessments across a variety of environments. In this role, you will:

• Plan, execute, and lead complex penetration tests, including internal, external, web application, network, mobile, IoT, API, social engineering, and cloud (e.g., AWS, Azure) assessments.
• Perform red team engagements to simulate attacks and advanced persistent threats, highlighting gaps in security controls; some travel and on-site engagements required.
• Identify, exploit, and document vulnerabilities using manual and automated techniques, adhering to methodologies and frameworks like OWASP Top 10, PTES, and MITRE ATT&CK.
• Analyze testing results, assess risks, and produce detailed reports with findings, exploitation procedures, risk ratings, and actionable remediation recommendations.
• Collaborate with client development, IT, and security teams to validate fixes, retest vulnerabilities, and improve overall security practices.
• Mentor junior penetration testers, provide training on tools and techniques, demonstrate continuous learning, and contribute to team knowledge sharing.
• Develop or customize scripts, tools, and methodologies to enhance testing efficiency and coverage.
• Stay current with emerging threats, vulnerabilities, exploits, and offensive security trends.
• Communicate technical findings clearly to non-technical stakeholders, including senior management.

WHAT YOU’LL BRING:

• Bachelor's degree in computer science, Information Security, Cybersecurity, or related field (or equivalent experience).
• Five (5) or more years of hands-on experience in penetration testing or ethical hacking, preferably in enterprise or regulated environments.
• Advanced security-related industry certifications (e.g., OSCP, GPEN) required.
• Preferred certifications: Offensive Security Certified Professional (OSCP), GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), or other relevant certifications (OSCE, GXPN, CEH, or equivalent).
• Advanced proficiency with tools such as Burp Suite, Nmap, Metasploit, Nessus, Kali Linux, Wireshark, Social Engineering Toolkit, and cloud-specific testing frameworks.
• Thorough understanding of Adversary TTPs and ability to emulate them in assessments.
• Strong knowledge of network protocols, operating systems (Windows, Linux), web technologies, and common vulnerabilities (e.g., OWASP Top 10, SANS Top 25).
• Experience in red teaming, vulnerability assessment, and reporting.
• Excellent problem-solving, analytical, and communication skills (written and verbal).
• Ability to work independently and lead engagements while collaborating in a team environment.
• Proficient in exploit development and scripting languages such as Python, Ruby, Go, etc.

WHAT WE OFFER:
 Our world-class work environment encompasses flexible and remote work options, a commitment to equity, and nationally respected teams in management consulting and technology servi