Decision Point Security, Inc Cybersecurity Test Engineer (Pentester) Colorado Springs, CO · Full time Company website

Apply for Cybersecurity Test Engineer (Pentester)

Decision Point team has over 150 years combined experience delivering solutions based on sound research principals and critical thinking. Members of the team have been trusted with hardening and assessment of some of our nation’s critical defense infrastructure and weapon systems.

We understand that achieving and maintaining adequate security requires thorough understanding of people, processes, and systems.

Challenges associated with each of these areas are dynamic and can be costly. Let our team work with you to deliver practical, cost effective solutions.

Responsibilities

• Plan, coordinate, and execute authorized penetration tests and adversary-emulation activities against networks, cloud environments, operating systems, web applications, APIs, and other approved targets.
• Review assessment scope, objectives, rules of engagement, test windows, access requirements, and operational constraints prior to testing.
• Use manual and automated techniques (including Nmap, Burp Suite, Wireshark, Python, PowerShell, and Bash) to identify, validate, and prioritize vulnerabilities, misconfigurations, and weak controls.
• Conduct network reconnaissance, service enumeration, web application testing, vulnerability validation, and controlled exploitation within approved scope.
• Assess attack paths, privilege escalation opportunities, lateral-movement risk, and potential impact to mission systems while minimizing operational disruption.
• Collect, protect, and document assessment evidence in accordance with approved handling, retention, and reporting procedures.
• Prepare clear technical reports describing findings, affected assets, risk impact, supporting evidence, and recommended remediation actions.
• Brief technical and non-technical stakeholders on assessment results, risk implications, and remediation priorities.
• Collaborate with system owners, developers, security operations personnel, and engineers to validate remediation actions and improve defensive controls.

Required Qualifications

• 5+ years of relevant cybersecurity experience, including 2+ years conducting authorized penetration testing or equivalent adversary-emulation, vulnerability-validation, or security-assessment activities.
• Bachelor’s degree in Computer Science, Cybersecurity, IT, Engineering, or equivalent combination of education, training, and experience.
• Must meet DoD 8140.03 / 8570.01-M requirements for Vulnerability Assessment Analyst or Exploitation Analyst work role (or obtain qualifying certification within 6 months of hire).
• Demonstrated knowledge of network protocols, enterprise operating systems, identity services, web application security, vulnerability management, and penetration-testing methodology.
• Proficiency with security-testing tools and scripting languages (Nmap, Burp Suite, Wireshark, Python, PowerShell, Bash).
• Knowledge of AI and Machine Learning security risks, including OWASP Top 10 for LLMs (prompt injection, training data poisoning, model evasion) and methods to audit AI pipelines.
• Active DoD SECRET security clearance with the ability to obtain/maintain TOP SECRET / SCI if required.
• U.S. Citizenship.

Preferred Qualifications

• Relevant penetration-testing certification, such as OSCP+, OSED, OSWE, CPTS, GPEN, or comparable credential.
• Master’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or related field.
• Demonstrated experience leading assessment planning, reporting, stakeholder briefings, and remediation validation.

Benefits

• Generous 401(k) contribution, matching not required
• Company Paid Health Insurance
• Company Paid Dental insurance
• Company Paid Vision Insurance
• Company Paid Life Insurance
• Paid Training
• Home Office Stipend
• Paid Time Off

Location

• Colorado Springs, CO / Peterson AFB, CO (Up to 25% travel required)