ZipRecruiter

Log In

1

Penetration Testing Government Jobs (NOW HIRING)

Koniag, Inc.

Penetration Testing Lead

Leesburg, VA · On-site

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Penetration Testing Lead to support KITS and our government customer in Washington, DC. This position is for a Future New ...

kgs

Penetration Testing Lead

Leesburg, VA · On-site

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Penetration Testing Lead to support KITS and our government customer in Washington, DC. This position is for a Future New ...

kgs

Penetration Testing Lead

Leesburg, VA · On-site

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking a Penetration Testing Lead to support KITS and our government customer in Washington, DC. This position is for a Future New ...

M9 Solutions

Penetration Tester III

Chandler, AZ · On-site

... government contract. The role involves conducting penetration testing, managing projects, and leading Red Team engagements. Responsibilities : • Conducting continuous penetration testing ...

Cyber Defense Technologies

Penetration Tester

Chantilly, VA · On-site

$90K - $130K/yr

Conduct penetration testing that uses both active and passive capabilities to expose and exploit IA vulnerabilities. * Review and evaluate information systems and recommend changes to the Government ...

M9 Solutions

Penetration Tester II

Washington, DC · On-site

... a government contract, requiring an active Secret clearance and expertise in various penetration testing methodologies. Responsibilities : • Conduct continuous penetration testing methodologies ...

M9 Solutions

Penetration Tester II

Chandler, AZ · On-site

... government contract and conduct various types of penetration tests, including Red Team engagements and IoT device testing. Responsibilities : • Conducting penetration tests on various systems and ...

M9 Solutions

Penetration Tester II

Chandler, AZ · On-site

... testing and support government contracts, requiring an active Secret clearance. Responsibilities : • At least three (3) years of pen test experience. • Experience with continuous penetration ...

M9 Solutions

Penetration Tester III

Chandler, AZ · On-site

... testing and security assessments for government clients, requiring an active Secret clearance and a Bachelor's degree. Responsibilities : • Experience in management or as a team leader, managing ...

M9 Solutions

Penetration Tester II

Chandler, AZ · On-site

... government contract, requiring an active Secret clearance and expertise in various penetration testing methodologies. Responsibilities : • Experience with continuous penetration testing ...

M9 Solutions

Penetration Tester II

Washington, DC · On-site

... testing and support government contracts, requiring an active Secret clearance. Responsibilities : • At least three (3) years of pen test experience. • Experience with continuous penetration ...

M9 Solutions

Penetration Tester III

Washington, DC · On-site

... testing and security assessments for government clients, requiring an active Secret clearance and a Bachelor's degree. Responsibilities : • Experience in management or as a team leader, managing ...

next page

Showing results 1-20

All JobsPenetration Testing Government Jobs

Penetration Testing Government information

See salary details

$22.5K

$119.9K

$168.5K

How much do penetration testing government jobs pay per year?

As of Aug 7, 2026, the average yearly pay for penetration testing government in the United States is $119,895.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,000.00 and $141,000.00 per year, depending on experience, location, and employer.

What is penetration testing in government?

Penetration testing in government refers to authorized simulated cyberattacks on government systems, networks, or applications to identify vulnerabilities before malicious actors can exploit them. These tests help government agencies strengthen their cybersecurity defenses, comply with regulations, and protect sensitive data. Penetration testers use a variety of tools and techniques to mimic real-world cyber threats, ensuring that security measures are effective and up to date.

What are some common challenges faced by penetration testers working in government environments?

Penetration testers in government settings often encounter unique challenges, such as navigating strict security protocols, handling sensitive or classified information, and complying with complex regulatory frameworks. They may also work within rigid change management processes, which can impact the speed and flexibility of testing activities. Collaboration with various departments is essential, as testers must communicate findings clearly to both technical and non-technical stakeholders to ensure vulnerabilities are properly understood and remediated.

What are the key skills and qualifications needed to thrive as a penetration tester in a government setting?

To thrive as a Penetration Tester in government, a deep understanding of network security, vulnerability assessment, and common attack methodologies is required, typically supported by a degree in cybersecurity or a related field. Familiarity with tools like Metasploit, Nmap, Burp Suite, and certifications such as OSCP, CEH, or CISSP are highly valued. Strong analytical thinking, attention to detail, and clear written and verbal communication skills distinguish top performers in this role. These skills are vital to effectively identify security weaknesses, communicate risks, and ensure the protection of sensitive government data and infrastructure.

What is the difference between Penetration Testing Government vs Penetration Testing Private Sector?

AspectPenetration Testing GovernmentPenetration Testing Private Sector
CredentialsCertifications like OSCP, CISSP, CEH often requiredSimilar certifications widely recognized, such as OSCP, CEH, CISSP
Work EnvironmentGovernment agencies, secure facilities, strict protocolsCorporate offices, consulting firms, diverse environments
Employer & Industry UsageFederal, state, or local government agenciesPrivate companies, cybersecurity firms, consulting agencies
Search & Comparison IntentUnderstanding roles within government cybersecurityComparing government vs private sector penetration testing roles

Penetration Testing Government professionals focus on securing government systems within strict protocols, often requiring specific certifications and working in secure environments. Private sector penetration testers work with commercial clients, offering more diverse projects and flexible settings. Both roles demand similar skills and certifications but differ mainly in work environment and employer type.

More about Penetration Testing Government jobs
What cities are hiring for Penetration Testing Government jobs? Cities with the most Penetration Testing Government job openings:
What states have the most Penetration Testing Government jobs? States with the most job openings for Penetration Testing Government jobs include:
What job categories do people searching Penetration Testing Government jobs look for? The top searched job categories for Penetration Testing Government jobs are:
Penetration Testing Government jobs near you
Infographic showing various Penetration Testing Government job openings in the United States as of August 2026, with employment types broken down into 90% Full Time, 5% Part Time, and 5% Contract. Highlights an 95% In-person, and 5% Remote job distribution, with an average salary of $119,895 per year, or $57.6 per hour.

External Network Penetration Tester

Xtreme Solutions Corporate

San Bernardino, CA • On-site

Full-time

Posted 6 days ago

Job description

Description:

Position Summary

Performs blind and intelligent penetration testing against internet-facing assets — web applications, firewalls, remote access (VPN/RDP), and internet postings — for all 47 County departments, attempting to obtain confidential/sensitive data using real-world threat intelligence-based techniques while evading detection.


Key Responsibilities

• Conduct external network and web application penetration testing and vulnerability assessments per NIST SP 800-115 methodology.

• Attempt to obtain ePHI, PII, financial data, and privileged communications from external sources without causing service disruption.

• Document all findings with risk ratings, evidence, and remediation recommendations for the Assessment report.

• Attempt to avoid detection and evade department response efforts during testing windows, as scoped.

Requirements:

Required Qualifications

• 4+ years of hands-on external network / web application penetration testing experience.

• Proficiency with industry-standard tools (Burp Suite, Nmap, Metasploit, or equivalent).

• Strong understanding of OWASP Top 10 and common network attack vectors.


Preferred Qualifications

• OSCP, GPEN, GWAPT, or CEH certification.

• Experience testing government or healthcare-sector environments.


Travel

Fully remote; must remain within the continental United States.