1

Cisa Penetration Testing Jobs (NOW HIRING)

Conduct fullspectrum penetration testing across enterprise, cloud, mobile, IoT, and HVA ... CISA AES HVA Assessment Lead or Technical Lead certification * U.S. citizenship is required.

Position Overview This role is centered on internal security and compliance testing, with emphasis ... CISA, OSCP, or equivalent Pay Transparency The salary range for this position is $150,000-$170,000 ...

Position Overview This role is centered on internal security and compliance testing, with emphasis ... CISA, OSCP, or equivalent Pay Transparency The salary range for this position is $150,000-$170,000 ...

Position Overview This role is centered on internal security and compliance testing, with emphasis ... CISA, OSCP, or equivalent Pay Transparency The salary range for this position is $150,000-$170,000 ...

Principal Penetration Tester

Johnston, RI · On-site

$150K - $170K/yr

Position Overview This role is centered on internal security and compliance testing, with emphasis ... CISA, OSCP, or equivalent Pay Transparency The salary range for this position is $150,000-$170,000 ...

Vulnerability Scanning / Penetration Testing * Ability to handle multiple assessments at one time * Possess/pursuing certifications such as CISA or CISSP, or something similar * Strong analytical ...

Conduct system-wide security assessments and cloud penetration testing. * Monitor cloud and on-prem ... CISSP, CISA, CCSP, CEH, ISO 27001, CSA STAR Cloud Security, or equivalent.

next page

Showing results 1-20

Cisa Penetration Testing information

See salary details

$22.5K

$119.9K

$168.5K

How much do cisa penetration testing jobs pay per year?

As of Jun 8, 2026, the average yearly pay for cisa penetration testing in the United States is $119,895.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,000.00 and $141,000.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a CISA Penetration Tester, and why are they important?

To thrive as a CISA Penetration Tester, you need strong knowledge of information security principles, vulnerability assessment techniques, and compliance standards, often supported by a CISA certification and technical degree. Familiarity with penetration testing tools (such as Metasploit, Burp Suite) and experience with risk assessment frameworks and reporting systems are typically required. Analytical thinking, attention to detail, and clear communication skills help you effectively identify risks and convey findings to stakeholders. These competencies are essential for protecting organizational assets and ensuring adherence to security and regulatory requirements.

What are some common challenges faced by professionals in a CISA penetration testing role?

Professionals in a CISA penetration testing role often encounter challenges such as keeping up with rapidly evolving security threats and technologies, effectively communicating complex technical findings to non-technical stakeholders, and balancing thorough assessments with tight project deadlines. Additionally, they must navigate varying network environments and sometimes incomplete documentation, which can make testing more complex. Collaboration with IT teams and maintaining strict ethical standards are also crucial aspects of the role.

What is CISA penetration testing?

CISA penetration testing refers to the process of simulating cyberattacks on systems, networks, or applications to identify vulnerabilities, as conducted or overseen by professionals certified as Certified Information Systems Auditors (CISA). These tests help organizations assess the strength of their security controls and ensure compliance with industry regulations. CISA professionals use a combination of manual and automated techniques to uncover weaknesses, document findings, and recommend remediation steps. The goal is to proactively address security risks before they can be exploited by malicious actors.
Penetration Tester / Secret

Penetration Tester / Secret

Peraton

Washington, DC • On-site

$104K - $166K/yr

Full-time

Posted 2 days ago


Peraton rating

8.3

Company rating: 8.3 out of 10

Based on 52 frontline employees who took The Breakroom Quiz

37th of 203 rated it services


Job description

Responsibilities

Peraton is currently seeking to hire an experienced Penetration Tester for its Federal Strategic Cyber Group. 

Location: Chandler, AZ and Washington DC.

 Role and Responsibilities: 
  • We are seeking to hire an experienced and highly skilled Penetration Tester to conduct advanced offensive security operations across diverse and highimpact environments.
  • This role supports critical national security missions by identifying vulnerabilities, emulating realworld adversaries, and strengthening defensive cyber capabilities across enterprise, cloud, mobile, IoT, and High Value Asset (HVA) systems.
  • You will lead technical engagements, drive red team operations, and collaborate closely with SOC, incident response, and engineering teams to ensure findings translate into measurable security improvements.
You will:
  • Conduct fullspectrum penetration testing across enterprise, cloud, mobile, IoT, and HVA environments.
  • Lead and execute adversary emulation and red team operations to validate SOC detection and response capabilities.
  • Serve as technical or team lead for offensive security engagements, including scoping, planning, execution, and reporting.
  • Identify exploitable vulnerabilities, develop proofofconcepts, and deliver actionable, riskprioritized findings.
  • Coordinate results and collaborate with SOC, IR, and engineering teams to support remediation and strengthen defensive posture.
Qualifications

Required:

  • Bachelor's degree in Cybersecurity, IT, or related field and 5 years of relevant experience. An additional 4 years will be considered in lieu of the degree requirement. 
  • Minimum of 5 years of hands-on penetration testing experience.
  • Experience with Red Team, IoT, Mobile, Cloud, and HVA testing.
  • Team lead, supervisory, or management experience.
  • Certification:
    • GPEN or GXPN
    • One or more of the following:
      • GRTP, CRTL, OSCP, CRTP, CMWAPT, CEPT, CPT, or LPT
    • CISA AES HVA Assessment Lead or Technical Lead certification
  • U.S. citizenship is required. 
  • Active Secret security clearance.
Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range$104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.EEOEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.Employment Type: FULL_TIME

What Peraton employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom


Peraton logo

About Peraton

Sourced by ZipRecruiter

At Peraton, we re at the forefront of delivering the next big thing every day. We re the partner of choice to help solve some of the world s most daunting challenges, delivering bold, new solutions to keep people around the world safer and more secure.

Industry

It services

Company size

10,000+ Employees

Headquarters location

Herndon, VA, US

Year founded

2017