Penetration Testing Lead

QuesTek Europe AB

Penetration Testing Lead at OCH Technologies responsible for leading security assessments and documenting findings. Combining technical expertise to enhance cybersecurity in a regulated environment.

Posted 7/10/2026full-timeWashington • District of Columbia, Washington • 🇺🇸 United StatesSeniorWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityFirewallsSwitching

About the role

Key responsibilities & impact

Serve as primary technical POC for all penetration testing activities, including network, system, application, aircraft cyber, and specialized assessments.
Develop Rules of Engagement (ROE) with system owners and ACG for each penetration test.
Ensure all parties understand scope, constraints, and reporting requirements before testing begins.
Personally lead high-complexity penetration tests in NAS and Mission Support environments.
Direct testing teams during execution.
Plan and execute red team and blue team exercises in simulated environments as directed by the FAA.
Design realistic attack scenarios that test the effectiveness of NAS cybersecurity defenses.
Document all penetration test results in Penetration Test Reports (PTRs) including attack vectors tested, vulnerabilities discovered, exploitation paths, and recommended remediation actions.
Assess and document impact when access is gained during testing, including potential cascading effects on associated systems and network infrastructure.
Report high-risk findings immediately to the FAA.
Lead regression penetration testing to validate that previously identified vulnerabilities have been effectively remediated.
Manage and maintain penetration testing tools and environments. All tools must be FAA-approved.
Attend all Program Management Reviews and report on penetration testing status, findings trends, and upcoming test schedules.

Requirements

What you’ll need

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Mathematics, Physics, or a related technical discipline from an accredited institution.
Minimum of fifteen (15) years of cybersecurity experience, including at least 5 years leading or supervising penetration testing teams.
At least two (2) years of relevant experience must have been performed within the last 3 years.
Demonstrated experience planning, executing, and documenting penetration testing engagements in complex, multi-system environments.
Expert-level proficiency with penetration testing tools such as Metasploit, Burp Suite, Nmap, and related frameworks.
Ability to conduct manual testing beyond automated tool output.
Deep understanding of NIST SP 800-115, PTES, OWASP, and industry-standard penetration testing methodologies.
Experience developing and operating within formal Rules of Engagement (ROE) for penetration testing.
Experience with red team / blue team exercises including scenario development, execution, and after-action reporting.
Understanding of network exploitation across multi-vendor environments including wireless, routing (Layer 3), switching (Layer 2), firewalls, IDS/IPS, and cloud services.
Candidate must have the ability to obtain and maintain a Public Trust. Active Secret clearance is preferred.

Benefits

Comp & perks

Paid time off and Holidays
Medical, Dental, and Vision Insurance
Paid Parental Leave
Short-term disability, long-term disability, and life insurance - Employer Paid!
401(k)
Additional Voluntary Life Insurance
Tuition Reimbursement & More!

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Penetration TestingNetwork ExploitationManual TestingVulnerability AssessmentAttack Vector Analysis

Soft Skills

Team LeadershipCommunicationDocumentation

Certifications

Public TrustActive Secret Clearance