ZipRecruiter

Log In

1

Pen Testing Jobs in Silver Spring, MD (NOW HIRING)

OneZero Solutions

Red Team Operator.

Alexandria, VA · On-site

Hands on experience with red team tasks and pen testing.Familiarity with malware development and EDR/AV bypass strategies.Experience with PowerShell, C, C++, or Python.Hands on experience utilizing ...

Nwis

Senior Network Engineer

Herndon, VA

$122K - $253K/yr

Forensics/Pen Testing: Encase, FTK, IDAPro, Python Forensics, Metasploit * Cloud/Security: AWS Virtualization w/ Palo Alto Direct Connects, Nessus, Web Inspect Please note, this position is ...

Nwis

Senior Network Engineer

Sterling, VA

$122K - $253K/yr

Forensics/Pen Testing: Encase, FTK, IDAPro, Python Forensics, Metasploit * Cloud/Security: AWS Virtualization w/ Palo Alto Direct Connects, Nessus, Web Inspect Please note, this position is ...

OneZero Solutions

Red Team Operator

Alexandria, VA · On-site

Hands on experience with red team tasks and pen testing. * Familiarity with malware development and EDR/AV bypass strategies. * Experience with PowerShell, C, C++, or Python. * Hands on experience ...

Nightwing

Senior Network Engineer

Sterling, VA · On-site

$122K - $253K/yr

Forensics/Pen Testing: Encase, FTK, IDAPro, Python Forensics, Metasploit * Cloud/Security: AWS Virtualization w/ Palo Alto Direct Connects, Nessus, Web Inspect Please note, this position is ...

OneZero Solutions

Red Team Operator

Alexandria, VA · On-site

Hands on experience with red team tasks and pen testing. * Familiarity with malware development and EDR/AV bypass strategies. * Experience with PowerShell, C, C++, or Python. * Hands on experience ...

Integrated Resources INC

Test Engineer

Ashburn, VA

Advanced technical skills in Network Security and Vulnerability testing and general knowledge in other areas of In-Home networking. 2 -3 years' experience with embedded device pen-testing, network ...

Visionist, Inc.

Embedded Developer

Fort George G Meade, MD · On-site

$125K - $180K/yr

... pen testing, and operational planning. Our open-door leadership team fosters a supportive culture, where internal growth and promotion opportunities are the norm. Don't just take our word for it ...

Visionist, Inc.

Embedded Developer

Fort George G Meade, MD · On-site

$125K - $180K/yr

... pen testing, and operational planning. Our open-door leadership team fosters a supportive culture, where internal growth and promotion opportunities are the norm. Don't just take our word for it ...

GuidePoint Security

Penetration Tester

Alexandria, VA · On-site

The Pen Tester role will be responsible for performing comprehensive Risk and Vulnerability Analysis (RVA) assessments, functioning as penetration and purple team assessments. The role will be in ...

previous page

Showing results 41-60

All JobsPen Testing JobsPen Testing Jobs in Silver Spring, MD

Pen Testing information

See Silver Spring, MD salary details

$9

$19

$32

How much do pen testing jobs pay per hour?

As of Aug 22, 2026, the average hourly pay for pen testing in Silver Spring, MD is $19.78, according to ZipRecruiter salary data. Most workers in this role earn between $15.91 and $19.90 per hour, depending on experience, location, and employer.

What is pen testing?

Pen testing, short for penetration testing, is a cybersecurity practice where professionals simulate attacks on a computer system, network, or application to identify vulnerabilities that malicious hackers could exploit. The goal is to proactively find and fix security weaknesses before they can be used in real-world attacks. Pen testers use a variety of tools and techniques to mimic the methods of cybercriminals, and then provide detailed reports with recommendations for improving security. Organizations often conduct pen tests regularly as part of their overall security strategy.

What are the key skills and qualifications needed to thrive as a penetration tester, and why are they important?

To thrive as a Penetration Tester, you need a solid understanding of network security, vulnerability assessment, and ethical hacking, often backed by a degree in computer science or cybersecurity and industry certifications like CEH or OSCP. Familiarity with tools such as Metasploit, Burp Suite, and Nmap, as well as various operating systems, is typically required. Strong analytical thinking, problem-solving skills, and effective communication set top performers apart when explaining findings to technical and non-technical stakeholders. These skills ensure that vulnerabilities are thoroughly identified and addressed, helping organizations protect critical data and systems.

What are some common challenges faced by penetration testers when working on client projects?

Penetration testers often encounter challenges such as limited timeframes to conduct thorough assessments, incomplete or outdated documentation from clients, and the need to clearly communicate technical findings to non-technical stakeholders. They may also face restrictions on testing certain systems due to business constraints or potential operational impact. Building trust with clients and ensuring testing activities do not disrupt critical services are also important aspects of the role.

What is the difference between Pen Testing vs Vulnerability Assessment?

AspectPen TestingVulnerability Assessment
PurposeSimulates attacks to identify exploitable vulnerabilitiesIdentifies and prioritizes security weaknesses
DepthIn-depth, targeted testingBroad, overview of vulnerabilities
CertificationsOSCP, CEH, GPENCISA, CISSP, CEH
Work EnvironmentHands-on, technical testingAnalysis and reporting

Pen Testing involves actively exploiting vulnerabilities to assess security defenses, while Vulnerability Assessment focuses on identifying and prioritizing potential weaknesses without exploiting them. Both are essential for a comprehensive security strategy but serve different roles in cybersecurity testing.

How do you become a pen tester?

To become a penetration tester, you typically need a strong foundation in computer networks, operating systems, and security principles, often gained through a degree in cybersecurity, computer science, or related fields. Gaining hands-on experience with tools like Kali Linux, Metasploit, and Wireshark, along with industry certifications such as the Offensive Security Certified Professional (OSCP), can improve job prospects. Continuous learning and staying updated on emerging vulnerabilities are essential in this field.

How hard is it to get into pen testing?

Pen testing is a specialized cybersecurity role that typically requires a strong understanding of networks, operating systems, and security principles, often gained through certifications like OSCP or CEH and hands-on experience. Entry can be competitive, but building skills with practical labs, scripting, and knowledge of tools like Kali Linux can improve chances of breaking into the field.

Is pen testing a good career?

Penetration testing, or pen testing, is a cybersecurity role focused on identifying vulnerabilities in systems and networks. It requires technical skills, knowledge of security tools, and often certifications like OSCP or CEH. The field offers high demand, competitive salaries, and opportunities for continuous learning, making it a strong career choice for those interested in cybersecurity.

What are popular job titles related to Pen Testing jobs in Silver Spring, MD?

For Pen Testing jobs in Silver Spring, MD, the most frequently searched job titles are:

What job categories do people searching Pen Testing jobs in Silver Spring, MD look for?

The top searched job categories for Pen Testing jobs in Silver Spring, MD are:

Pen Testing jobs near you
Infographic showing various Pen Testing job openings in Silver Spring, MD as of August 2026, with employment types broken down into 36% Full Time, 8% Part Time, and 56% Contract. Highlights an 100% In-person job distribution, with an average salary of $41,152 per year, or $19.8 per hour.

Red Team Operator.

OneZero Solutions

Alexandria, VA • On-site

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

This job post has expired today. Applications are no longer accepted.

Job description

We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas. OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance. Additional details are available on our website: https://www.onezerollc.com/careers/Position Title: Red Team OperatorLocation: Alexandria, VA HybridClearance: TS/SCIProgram Overview:OneZero is looking for a Red Team Operator to join our diverse team supporting the United States Coast Guard in Alexandria, Va. In this role the candidate will be responsible for engaging in Red Team assessments, utilizing Command & Control (C2) frameworks to conduct adversary simulations. This role involves standing up, managing, and maintaining attacker infrastructure, utilizing GitLab for script and tooling repositories, and applying established adversary tactics, techniques, and procedures (TTPs). Key Responsibilities:Adversary Simulation:Deploy, configure, and operate C2 frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.Apply TTPs for initial access, lateral movement, privilege escalation, persistence and data exfiltration.Leverage proprietary and open-source offensive security tool sets effectively to achieve engagement objectives.Execute phishing assessments.Infrastructure:Monitor, manage, and maintain cloud and on-premise infrastructure used during assessments.Understanding the use of Git Repositories for maintaining operational tools and scripts.Penetration Testing:Internal and external penetration testing.Network mapping and enumeration.Assess web and mobile applications.Perform database scans.Assess Active Directory attack paths using tools such as BloodHound.Security Assessments:Assessing Coast Guard's cyber security posture of operational networks through adversary emulation.Develop reports and briefs detailing findings and recommendations for all assessments completed.Perform cyber threat emulation during scripted exercises, to train DoD Cyber Protection Teams.QualificationsRelevant Years of Experience: 5+Education: BA/BS or equivalent years of relevant experienceCertifications: IAT II or IAT IIIGPEN, Red Team Apprentice Course (RTAC), or equivalentSkills, & Expertise: Hands on experience with computers and network security.Experience conducting phishing campaigns or social engineering.Hands on experience with red team tasks and pen testing.Familiarity with malware development and EDR/AV bypass strategies.Experience with PowerShell, C, C++, or Python.Hands on experience utilizing Command and Control (C2) Frameworks such as Cobalt Strike, Sliver, HavocOneZero Solutions, LLC is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws.To request an accommodation, please contact us at recruiting@onezerollc.com or call (202) 987-2580.  
Job Posted by ApplicantPro