Red Team Tester (Junior)

Position DescriptionValiant Solutions is seeking a Red Team Tester – Junior to support authorized red team, penetration testing, and adversarial security assessments across our government customer's systems and applications. Working under the guidance of senior team members, you will identify exploitable vulnerabilities, validate security controls, document attack paths, and deliver actionable findings that strengthen the customer's cybersecurity posture. You will build test scenarios around real-world adversary tactics, techniques, and procedures (TTPs) and document your work using the MITRE ATT&CK framework

Named one of the Washington Business Journal’sBest Places to Work every year since 2014, Valiant is proud of our employee-centric culture and commitment to excellence. If you are interested in learning more about Valiant and this opportunity, we invite you to apply now!

Location: Remote with ad hoc travel to the Washington DC Metro area.

This position allows for 100% remote work. Remote work requires a high level of trust in our employees, and we strictly adhere to the details outlined in our Remote Work Policy below.

Required Clearance: Must be able to obtain and maintain a Public Trust clearance

Eligibility Requirements: U.S. citizenship is required to obtain the necessary clearance for this position.

Required Experience:

• 3 to 5 years of work experience in the subject area.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related discipline, or equivalent applicable experience.

• An industry professional certification; Security+, CEH, eJPT, PNPT, or OSCP preferred.

• Hands-on cybersecurity experience in penetration testing, vulnerability assessment, security testing, ethical hacking, or related activities.

• Working knowledge of network protocols, operating systems, web technologies, and common security vulnerabilities.

• Familiarity with penetration testing methodology and vulnerability exploitation.

• Understanding of the MITRE ATT&CK framework and common attacker TTPs.

• Experience with tools such as Burp Suite, Nmap, Metasploit, Kali Linux, Wireshark, Nessus/Tenable, BloodHound, or comparable offensive security tools.

• Familiarity with Windows and Linux environments.

• Scripting experience in Python, PowerShell, Bash, or similar languages.

• Exposure to AWS cloud security testing.

• Ability to clearly document technical findings and remediation recommendations.

• Strong analytical, troubleshooting, and communication skills.

• Familiarity with NIST SP 800-115.

Responsibilities:

• Support authorized red team and penetration testing engagements across customer systems, networks, applications, APIs, and cloud environments.

• Conduct vulnerability validation and exploitation activities under established rules of engagement (ROE).

• Assist with reconnaissance, enumeration, attack-path analysis, exploitation, and post-exploitation activities.

• Perform web application, network, API, and infrastructure security testing.

• Support testing scenarios based on real-world adversary TTPs.

• Apply the MITRE ATT&CK framework to categorize and document adversary techniques.

• Assist with testing security controls and identifying weaknesses that could lead to unauthorized access or privilege escalation.

• Document testing procedures, evidence, vulnerabilities, attack paths, and results.

• Develop clear technical findings that describe vulnerabilities, risk, evidence, and recommended remediation.

• Retest identified vulnerabilities after remediation.

• Maintain knowledge of emerging vulnerabilities, exploits, attack techniques, and defensive technologies.

• Follow the customer's rules of engagement, security requirements, and testing procedures.

About Valiant Solutions [Valiant Solutions](https://himalay...