Herndon, Virginia, United States · Hybrid
$130k–$160k/yr
Fortreum is a trusted leader in cloud and cybersecurity services, ranked among the Top 5 FedRAMP Third Party Assessment Organizations (3PAO). With the addition of Kovr.AI, we have expanded our capabilities to include adv…
Skills: Network Penetration Testing, Web Application Penetration Testing, API Penetration Testing, Mobile Penetration Testing, Social Engineering
Fredericksburg, Virginia, United States · On-site
$32/hr–$57/hr
Join our dynamic team and become a critical guardian of technological infrastructure! As a Data Center Engineering Technician, you'll play a pivotal role in maintaining the heartbeat of mission-critical technology infras…
Skills: Electrical Maintenance, Mechanical Maintenance, Troubleshooting, Preventative Maintenance, Building Management Systems (BMS)
Herndon, Virginia, United States · Hybrid
$149k–$201k/yr
AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the…
Skills: Technical Program Management, Software Development, Infrastructure Security, Cross-functional Leadership, Strategic Planning
Arlington, Virginia, United States · On-site
$100k–$120k/yr
Job DetailsJob Location: ARLINGTON, VA 1-JSF/JPO - Arlington, VA 22202Position Type: Full TimeSalary Range: $100,000.00 - $120,000.00 Salary/yearSecurity Specialist – Industrial – DD254 Specialist, Mid-level: System High…
Skills: DD Form 254 Management, Industrial Security, NISPOM, DSS, Intelligence Community Directives
Springfield, Virginia, United States · On-site
$59k–$107k/yr
Leidos is looking for a mission-driven Geospatial Analyst that will deliver GEOINT support to Counterintelligence (CI) operations. In this role, you will produce map-based analytic products that support customer critical…
Skills: GEOINT Analysis, Activity-Based Intelligence, ArcGIS Pro, QT Modeler, RemoteView
Falls Church, Virginia, United States · On-site
$160k–$239k/yr
RELOCATION ASSISTANCE: No relocation assistance available CLEARANCE REQUIRED FOR START: Yes CLEARANCE TYPE: Top Secret TRAVEL: Yes, 25% of the TimeDescription At Northrop Grumman, our employees have incredible opportunit…
Skills: Industrial Security Management, Insider Threat Program Management, Counterintelligence, Security Investigations, Risk Management
Charlottesville, Virginia, United States · Remote OK
Overview: This graduate student position is a remote position with flexible hours and days. The University of Virginia's Center for Public Safety and Justice launched in 2024 with the mission to challenge and shape futur…
Skills: Literature Reviews, Survey Development, Interview Protocols, IRB Submissions, Quantitative Data Analysis
Virginia Beach, Virginia, United States · On-site
PURVIS Systems is a technology solutions partner that develops, implements and maintains mission-critical solutions for federal and local government agencies. PURVIS is seeking an Electrical Engineer to support electrica…
Skills: Electrical Systems Knowledge, Technical Drawing Interpretation, Circuit And Systems Analysis, Test And Evaluation Support, Navy Standards Familiarity
Wallops Island, Virginia, United States · On-site
Position Description Summary: APT Research is hiring a Flight Safety Analyst for our SMAS III contract. SMAS III is seeking a highly motivated individual experienced in Guided and Unguided Vehicle Flight Safety Analysis.…
Skills: Flight Safety Analysis, Risk Analysis, Aerodynamic Studies, Casualty Expectation Studies, Failure Modes and Effects Analysis
Wallops Island, Virginia, United States · On-site
Position Description Summary: APT Research is hiring a Flight Termination System Engineer. SMAS III is seeking a highly skilled Electrical Engineer specializing in Flight Termination Systems (FTS) to join our aerospace e…
Skills: Flight Termination Systems, Electrical Engineering, Radio Frequency Systems, Command Destruct Receivers, High-reliability Circuit Design
Wallops Island, Virginia, United States · On-site
Position Description Summary: APT Research is hiring a Software Assurance Engineer for our SMAS III contract. This position supports the ARES Safety and Mission Assurance Support (SMAS) III contract to provide onsite sof…
Skills: Software Safety Engineering, Hazard Analysis, NASA Standards, Verification & Validation, Requirements Traceability
Hampton, Virginia, United States · On-site
NASA enforces REAL ID requirements for all visitors and badge holders. Please visit www.dhs.gov/real-id to view a list of compliant documents. The successful candidate will join the Maintenance Department to support the …
Skills: Pipe Planning, Maintenance Scheduling, Work Package Development, CMMS, IBM Maximo
Fairfax County, Virginia, United States · On-site
$65k–$105k/yr
Job DetailsJob Location: Tysons Corner, VA 22043Position Type: Full TimeJob Category: Intelligence Operations Support RenXTech | People-Focused. Mission-Obsessed. At RenXTech, we're not just different, we're better. We h…
Skills: Intelligence Analysis, Cable Writing, Briefing Skills, Interpersonal Skills, Collaborative Project Work
Herndon, Virginia, United States · On-site
$108k–$189k/yr
AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the…
Skills: People Management, Network Engineering, Project Delivery, Data Center Infrastructure, Vendor Management
McLean, Virginia, United States · On-site
$99k–$225k/yr
ISSO Security Analyst, Senior The Opportunity: As a Security Analyst on our team, you’ll use your experience to work with Veterans Affairs (VA) Information System Owners (ISO), Information System Security Officers (ISSO)…
Skills: Risk Management Framework, NIST SP 800-53, FISMA, Security Categorization, POA&M
Stafford County, Virginia, United States · On-site
Responsibilities Allan Myers is looking for a hard-working, dedicated Construction Superintendent with high heavy civil technical knowledge and excellent leadership skills. Join our elite team of professionals building e…
Skills: Heavy Civil Construction, Project Planning, Crew Supervision, Budget Management, Equipment Utilization
McLean, Virginia, United States · On-site
$99k–$225k/yr
ISSO Security Analyst The Opportunity: As a security analyst on our team, you’ll use your experience to work with Veterans Affairs (VA) Information System Owners (ISO), Information System Security Officers (ISSO), site m…
Skills: Risk Management Framework, NIST SP 800-53, FISMA, Security Categorization, POA&M
McLean, Virginia, United States · On-site
$62k–$141k/yr
Targeter The Opportunity: Critical decisions are made every single day in support of our nation's defense. What if you could use your analytical skills and operational mindset to help protect the country? With all the in…
Skills: All-source Intelligence, Targeting Lifecycle, SIGINT, MASINT, IMINT
Chantilly, Virginia, United States · On-site
$99k–$225k/yr
Technical Tradecraft Instructor The Opportunity: Critical decisions are made every single day by our client. What if you could use your analytical skills to help them make informed decisions? With all the information ava…
Skills: Technical Tradecraft, Training Program Development, Intelligence Analysis, Operational Exercise Planning, Mentoring
McLean, Virginia, United States · On-site
$135k–$216k/yr
Responsibilities Peraton is seeking a Targeting Analyst to provide expert analysis of multi-INT data to develop comprehensive and accurate identity intelligence on behalf of a national-level customer. The analyst will ev…
Skills: Multi-INT Analysis, Identity Intelligence, Targeting Product Development, All-Source Intelligence, Analytic Methodologies
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
Conduct comprehensive penetration testing across networks, applications, and social engineering vectors to achieve customer objectives. Advise clients on vulnerability remediation and compliance requirements while mentoring junior team members.
Requires a Bachelor's degree or equivalent experience, with at least 3 years of penetration testing and 2 years of professional services experience. Must possess or be able to obtain a Top Secret clearance and be able to work in a SCIF in Northern Virginia or Seattle.
Fortreum is a trusted leader in cloud and cybersecurity services, ranked among the Top 5 FedRAMP Third Party Assessment Organizations (3PAO). With the addition of Kovr.AI, we have expanded our capabilities to include advanced cyber risk quantification and analytics, enabling organizations to better understand, measure, and communicate risk. Together, we deliver independent, third-party, vendor-agnostic regulatory assessment and advisory services, alongside advanced cybersecurity offensive and compliance technical solutions. Our comprehensive service portfolio spans regulatory compliance frameworks including FedRAMP, CMMC, FISMA, SOC, PCI, ISO, and HIPAA.
Working with Fortune 500 companies and leading cloud service providers, we’ve built our reputation on service-delivery excellence and an unwavering commitment to client success. Our continued rapid growth creates exceptional opportunities for driven professionals to make their mark in the cybersecurity industry—guided by our core values: quality above all, a customer-driven mindset, autonomy, and personal accountability.
On our team, you will have the opportunity to work with the best and brightest in the field. Fortreum team members have supported the biggest cloud providers in the world, and you will have the opportunity to learn from the best. We're seeking a seasoned Penetration Tester to join our team. Your expertise in cloud penetration testing (FedRAMP and other compliance frameworks) and security best practices will be essential in helping our customers.
This role will be responsible for conducting network, application (API, mobile, and web), and Social Engineering penetration testing. Specifically, you would:
Work closely with all members of the team to conduct penetration testing of customer networks, applications (API, web, and mobile), and/or social engineering activities to achieve the customer’s objectives of the engagement.
Advise customers on details of vulnerabilities, remediation strategies, and compliance requirements
Prepare final deliverables for delivery to customers within established timelines
Establish and maintain positive relationships with customers and stakeholders
Coordinate project readiness with internal teams and customers
Pursue continuous professional development in by achieving industry specific certifications (must be willing to meet FedRAMP certification requirements as outlined by A2LA)
Perform project readouts with customers to notify them of the outcome of their penetration test
Train and mentor junior team members
Interface with customers and other internal delivery team members through entire engagement, interacting will all levels of customer organizations
This is a customer facing role. Travel is expected to be limited in nature; however, you may be required to travel to client locations to deliver professional services periodically when needed.
Bachelor’s Degree or 4 years of equivalent job experience
2+ years of professional services experience
3+ years of web application and network penetration testing experience
Proficient in at least one or more scripting languages (i.e., bash, python, PowerShell, ruby, etc.)
Strong technical acumen with regards to penetration testing methodologies
Familiarity with best practices frameworks such as OWASP, MITRE ATT&CK, OSSTMM, and/or PTES
Ability to work in a SCIF in Northern Virginia or Seattle, Washington
Active Top Secret clearance or ability to get a Top Secret clearance
eCPPT, OSCP, OSCE, OSWE, or GPEN certifications
Ability to quickly assess new and leading-edge technologies and concepts
Ability to manage multiple priorities simultaneously
Proven analytical and problem-solving skills
Ability to develop technical content for website updates, whitepapers, and blog posts that can be used both internally and by our clients to assist them in evaluating/building out their security programs
Ability to develop and maintain strong relationships with team members and clients
Familiarity with commonly used network architecture, network devices/services, development platforms, and software suites
Ability to work in a team environment with compliance specialists who conduct security control assessments in parallel
Comfortable supporting fast-paced team environments
Familiarity of penetration testing in cloud environments encompassing a variety of technology stacks
$130,000 - $160,000 annual salary
What Fortreum Offers
We offer a competitive compensation package, where you will be rewarded based on your performance/outcomes and recognized for the value you bring to our business. Our benefits package includes medical insurance, dental insurance, vision insurance, 401K plan with a 4% match, company paid short-term disability, company paid long-term disability, company paid AD&D and life insurance, flex time off, annual bonuses, training stipends, certification reimbursements, access to over 30,000 free online training courses, personal cell phone allowance, new hire and annual home office stipend, spot awards and eleven paid holidays.
Fortreum is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. If you’d like to view a copy of the company’s affirmative action plan or policy statement, please email [email protected]. If you have a disability and you believe you need a reasonable accommodation in order to search for a job opening or to submit an online application, please e-mail [email protected] or call 703-594-1460. This email and phone number is created exclusively to assist disabled job seekers whose disability prevents them from being able to apply online. Only messages left for this purpose will be returned. Messages left for other purposes, such as following up on an application or technical issues not related to a disability, will not receive a response.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
The New Standard in Compliance.
At Fortreum, we help organizations navigate the evolving world of compliance with clarity, speed, and confidence — so they can focus on building trust and driving innovation. We combine deep assurance expertise with an AI-native approach through the Kovr.ai platform to move compliance from a point-in-time exercise to continuous, defensible compliance at scale. Our team partners with cloud service providers, government agencies, and enterprises to support frameworks including FedRAMP, CMMC, FISMA, SOC, ISO, PCI, HIPAA, and GovRAMP. By unifying advisory expertise with automation and continuous monitoring, we reduce manual effort, accelerate time to authorization, and strengthen audit readiness across complex environments. From readiness to authorization and beyond, Fortreum delivers scalable compliance solutions designed for today’s fast-moving regulatory landscape. **Our Expertise:** • Compliance strategy & advisory • FedRAMP, CMMC, SOC, ISO, HIPAA, PCI, and GovRAMP readiness • Continuous assurance powered by AI-driven platforms • Public sector & regulated cloud enablement Fortreum — The New Standard in Compliance.
Offices: Washington, DC, US
Based on 5754 listings with disclosed salaries, most security & safety jobs in Virginia pay between $78k–$200k per year. Individual offers vary with seniority, company size, and specialization.
There are currently 10,523 open security & safety positions in Virginia listed on Clera. New openings are added daily as companies post roles.
Companies currently hiring include Allied Universal, Booz Allen Hamilton, CACI International Inc, Virginia Information Technologies Agency, Amazon, among others. Browse the listings above to see every active employer.
Yes — 1598 of the 10523 open security & safety positions offer remote or hybrid work (444 remote, 1154 hybrid).
Each listing links directly to the employer's application page. Apply early — fresh listings get the most recruiter attention in the first two weeks.
