[Hiring] Mid-Level Penetration Tester @Dragonfli Group

Role Description

Dragonfli Group is seeking a Mid-Level Penetration Tester to join a consolidated enterprise Penetration Testing program supporting a large federal agency. In this fully remote role, you will:

• Plan and execute authorized penetration tests across network, endpoint, wireless, database, application, and infrastructure environments, following structured Planning, Discovery, Testing, and Reporting phases.
• Develop Rules of Engagement, Execution Plans, and decision-ready reporting.
• Coordinate directly with system owners and SOC personnel to confirm scope and safety thresholds.
• Validate exploitable conditions arising from misconfigurations, outdated software, and weak access controls.
• Support validation of CISA WAS and FAST findings, KEV exposure items, and coordinate retesting to confirm closure.
• Use approved AI-enabled tools to improve reconnaissance and ATT&CK/ATLAS mapping while maintaining human oversight.

This role calls for approximately 5 to 8 years of relevant experience leading or independently executing penetration testing engagements.

This is a multi-year contract position involving a large US federal agency. Candidates with previous federal contracting experience are preferred. U.S. Citizenship or Permanent Residency is required. If hired, all work related to this role must be performed within the continental U.S.

Qualifications

• Approximately 5 to 8 years of experience conducting or leading penetration testing engagements.
• Demonstrated ability to plan and execute assessments across network, endpoint, wireless, database, application, and infrastructure environments.
• Experience developing Rules of Engagement, Execution Plans, and formal, decision-ready reporting for stakeholders.
• Experience coordinating directly with system owners and SOC personnel on scope, safety thresholds, and stop/pause procedures.
• Ability to work fully remote with reliable, secure connectivity.

Requirements

• U.S. Citizenship or Permanent Residency (required for this federal engagement).
• Previous federal contracting experience (preferred).
• Experience with CISA WAS, CISA FAST, and KEV validation and retest workflows (preferred).
• Familiarity with MITRE ATT&CK and ATLAS mapping (preferred).
• Advanced certifications such as OSCP, OSCE, GPEN, or GXPN (preferred).
• Experience integrating AI-enabled tools into testing workflows while maintaining human oversight of results (preferred).

Benefits

• Medical: Multiple POS health plan options including an HSA-compatible plan.
• Dental: PPO coverage for preventive, basic, and major services.
• Vision: Annual exam, frames, lenses, and contact lens allowance.
• 401(k): Employer match up to 5% of eligible compensation.
• Long-Term Disability: 100% employer-paid coverage at 50% of pre-disability earnings.
• Life Insurance and AD&D: 100% employer-paid coverage valued at $10,000 each.
• PTO: 15 to 25 days annually based on tenure.
• Paid Federal Holidays: All 11 federal holidays observed.