Penetration Tester - TS/SCI w POLY

Falls Technology is a forward-thinking company dedicated to delivering innovative, high-impact solutions to clients across government and industry.

We foster a culture built on collaboration, technical excellence, and integrity—where skilled professionals are empowered to do meaningful work that drives mission success.

As a trusted leader in digital transformation, we blend deep technical expertise with a user-focused mindset to modernize systems, reduce risk, and create secure, scalable solutions.

At Falls Technology, we invest in our people because we know they are the foundation of our success.

We offer a robust benefits package that includes comprehensive health coverage, generous paid time off, 401(k) matching, flexible work arrangements, and professional development support.

Our people-first approach ensures that you’re not only valued but also set up to thrive in your role and grow your career.

Position: Penetration Tester / Security Assessment Specialist Must hold an active TS/SCI with Polygraph

Falls Technology is seeking a highly skilled Penetration Tester / Security Assessment Specialist to join our cybersecurity team.

This role involves performing detailed security assessments, penetration tests, and vulnerability analyses to protect critical systems and data.

The ideal candidate is hands-on, highly technical, and experienced in identifying, documenting, and communicating security risks in complex environments.

• Conduct internal penetration testing and vulnerability assessments of servers, web applications, web services, and databases
• Manually exploit and compromise operating systems, web applications, and databases
• Analyze results from web/OS scanners and static source code analysis tools
• Identify vulnerabilities, misconfigurations, and compliance gaps
• Create final assessment reports detailing risks, mitigation strategies, and supporting references
• Collaborate effectively with developers, system administrators, project managers, and senior government stakeholders
• Provide actionable security recommendations to technical and non-technical audiences