Halfaker and Associates, an award-winning high growth small business, creates innovative and customer-centric technology solutions in the areas of Digital Services, Data Analytics, Cyber Security and Cloud Services to improve the health, security and well-being of all Americans. Our commitment to excellence and our vision to “Continue to Serve” has resulted in steady growth and an expanding client base across government agencies in the health, defense, security and intelligence sectors. Our strong focus on internal culture has helped Halfaker achieve several workplace awards including Great Place to Work Certification™ and Tampa Bay Top Workplaces. Headquartered in Arlington, VA, we have employees nationwide. Please take a moment to browse through our website and learn more about what it means to serve with Halfaker.

Halfaker has an opening for a PRINCIPAL CYBER ENGINEER (PENETRATION TESTER) to join our talented, dynamic team. The key responsibilities for this position include:​

• Perform penetration testing against various systems, which may include web applications, databases, web services, network devices, operating systems, cloud installations, and infrastructure (hardware) devices
• Utilize a variety of industry standard security tools to conduct manual-based security assessments
• Utilize a variety of industry standard security tools to conduct automated scans against systems
• Review new vulnerabilities as they are published and develop impact assessments
• Determine risk from vulnerabilities based on availability of exploit and potential loss of information and IT services capabilities
• Produce periodic trending and impact reports as required
• Generate reports (automated and manual) based on results from assessments and have the ability to explain in detail to customers
• Develop new testing programs
• Manage and maintain back end systems hardware and software
• Knowledge and experience with processes and procedures relating to Red Team activities; information gathering, threat modeling, vulnerability analysis, exploitation, post-exploitation, and reporting
• Administer existing and future infrastructure including system maintenance and management

Required Skills

A successful candidate will have demonstrated experience and knowledge with multiple of the following:

• Support of Windows, Unix, and Linux operating systems
• VMWare
• Cobalt Strike
• Kali Linux Suite
• Nessus Scanner
• RedHat Enterprise Linux
• Putty
• NMAP
• Core Impact Pro

One or more of the following certifications:

• Security+
• Network+
• VA CSP
• CISSP
• C|EH

Required Experience

10+ years of experience

Bachelor’s degree

• 8 years of additional relevant experience may be substituted for education

​Halfaker and Associates, LLC, is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/ Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. U.S. Citizenship is required for most positions.​​

A successful candidate will have demonstrated experience and knowledge with multiple of the following:

• Support of Windows, Unix, and Linux operating systems
• VMWare
• Cobalt Strike
• Kali Linux Suite
• Nessus Scanner
• RedHat Enterprise Linux
• Putty
• NMAP
• Core Impact Pro

One or more of the following certifications:

• Security+
• Network+
• VA CSP
• CISSP
• C|EH