Penetration Tester Visa Sponsorship Jobs in Washington DC
Penetration tester visa sponsorship jobs in Washington DC are concentrated among federal contractors, defense agencies, and cybersecurity firms like Booz Allen Hamilton, Leidos, and Mandiant. The region's dense cluster of government clients and cleared-facility employers makes DC one of the most active hiring markets for sponsored pen testing talent in the country.
Find Penetration Tester JobsOverview
Showing 5 of 9+ Penetration Tester Jobs in Washington DC with Visa Sponsorship
See all Penetration Tester Jobs in Washington DC with Visa Sponsorship
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Penetration Tester Jobs in Washington DC with Visa Sponsorship.
Get Access To All JobsAbout Swingtech
Swingtech delivers innovative Information Technology and Professional Support services to a diverse range of clients across the federal and intelligence communities. With over 15 years of trusted experience as a systems integrator, we apply agile methodologies and deep industry insight to help our customers achieve greater efficiency, compliance, and cost savings. At Swingtech, we’re committed to excellence and long-term success for our clients and our team.
Position Summary
The AI Security Engineer designs, assesses, documents, and improves cybersecurity, privacy, and AI-specific security controls for DOL AI systems. The role ensures that AI-enabled applications, data pipelines, models, RAG systems, vector stores, agentic workflows, APIs, and cloud services are secured and supported by evidence required for Government authorization and production release.
Essential Duties
- Develop and implement AI security architecture, threat models, control matrices, security requirements, abuse cases, test plans, and remediation plans.
- Implement and validate security controls across AI applications, LLM integrations, data pipelines, model endpoints, RAG systems, vector stores, MCP servers, APIs, orchestration services, and CI/CD pipelines.
- Conduct AI-specific security testing, including prompt injection, jailbreaks, malicious-input attacks, retrieval manipulation, data poisoning, model extraction, model inversion, credential compromise, access-control bypass, insecure output handling, and tool-abuse scenarios.
- Apply Zero Trust, least privilege, role-based access, FIPS-validated encryption, secrets management, audit logging, secure configuration, vulnerability management, and secure software-development practices.
- Support FISMA, RMF, and ATO activities, including security categorization, system boundaries, SSPs, SAPs, SARs, POA&Ms, continuous monitoring, security assessments, risk decisions, and remediation evidence.
- Support assessment and approval of AI models, third-party AI services, cloud services, model providers, APIs, tools, and data-handling practices before their integration into DOL systems.
- Validate that approved cloud AI services satisfy applicable FedRAMP requirements and DOL authorization expectations.
- Ensure PII, CUI, prompts, retrieval context, embeddings, model outputs, logs, backups, and evaluation data are protected through approved controls.
- Support AI Incident Response Plan development and maintenance, including escalation paths, evidence preservation, reporting templates, severity classification, containment procedures, and post-incident review.
- Coordinate security incident investigation, containment, mitigation, recovery, and reporting for suspected or confirmed security events.
- Support supply-chain security, Software Bill of Materials generation, dependency scanning, secure-development attestations, vulnerability remediation, and third-party risk management.
- Collaborate with engineering teams to integrate security into development, testing, deployment, and production operations.
Required Qualifications
- Bachelor’s degree in cybersecurity, computer science, information assurance, engineering, information systems, or a related field.
- At least five years of experience in cybersecurity engineering, cloud security, application security, DevSecOps, security architecture, RMF/ATO, or comparable technical security roles.
- Experience with Federal cybersecurity frameworks, including FISMA, NIST SP 800-53, NIST SP 800-171, FIPS 199, FIPS 200, FedRAMP, and RMF/ATO.
- Experience securing cloud applications, APIs, data platforms, CI/CD pipelines, identity services, and containerized or cloud-native systems.
- Experience with vulnerability management, security logging and monitoring, incident response, security testing, and security documentation.
- Working knowledge of AI/ML security threats, including prompt injection, jailbreaking, model compromise, model extraction, data poisoning, RAG poisoning, retrieval manipulation, and AI supply-chain risks.
- Strong communication skills and ability to coordinate with engineering, privacy, governance, security, program-management, and Government stakeholders.
- Must be willing to work 3 days onsite at customer site in Washington, DC.
Preferred Qualifications
- CISSP, CCSP, CISM, Security+, AWS Security Specialty, Azure Security Engineer, GIAC, CEH, or comparable security certification.
- Experience with AI red teaming, AI threat modeling, OWASP Top 10 for LLM Applications, NIST AI RMF, CISA AI guidance, MITRE AI security frameworks, or adversarial ML testing.
- Experience with SIEM/SOAR, CSPM, secrets management, SAST/DAST, container security, SBOMs, software supply-chain assurance, and cloud security posture management.
- Experience with Federal civilian agencies, Government ATO packages, or FedRAMP environments.
Summary of Benefits
- 15 PTO days
- 11 paid holidays
- Medical Insurance with – 3 options (HSA with $600 Employer Contribution).
- Dental Insurance with no age limit orthodonture.
- Vision Insurance through EyeMed in and out of network coverage.
- Short Term and Long-Term Disability coverage with 100% premium support.
- Life insurance and AD&D with 100% premium support.
- Supplemental Life Insurance.
- Critical Care and Accident Insurance availability.
- Pet Insurance through Nationwide.
- Employee Assistance Program.
- 401k with enrollment from day one. 4% deferral by company.
- $1500 Annual Training Budget.
- $1500 Referral bonus.
- Eligibility for annual merit and discretionary bonus.
- Flexible work arrangements.
Equal Opportunity Employer Minority/Female/Veterans/Disabled
About Swingtech
Swingtech delivers innovative Information Technology and Professional Support services to a diverse range of clients across the federal and intelligence communities. With over 15 years of trusted experience as a systems integrator, we apply agile methodologies and deep industry insight to help our customers achieve greater efficiency, compliance, and cost savings. At Swingtech, we’re committed to excellence and long-term success for our clients and our team.
Position Summary
The AI Security Engineer designs, assesses, documents, and improves cybersecurity, privacy, and AI-specific security controls for DOL AI systems. The role ensures that AI-enabled applications, data pipelines, models, RAG systems, vector stores, agentic workflows, APIs, and cloud services are secured and supported by evidence required for Government authorization and production release.
Essential Duties
- Develop and implement AI security architecture, threat models, control matrices, security requirements, abuse cases, test plans, and remediation plans.
- Implement and validate security controls across AI applications, LLM integrations, data pipelines, model endpoints, RAG systems, vector stores, MCP servers, APIs, orchestration services, and CI/CD pipelines.
- Conduct AI-specific security testing, including prompt injection, jailbreaks, malicious-input attacks, retrieval manipulation, data poisoning, model extraction, model inversion, credential compromise, access-control bypass, insecure output handling, and tool-abuse scenarios.
- Apply Zero Trust, least privilege, role-based access, FIPS-validated encryption, secrets management, audit logging, secure configuration, vulnerability management, and secure software-development practices.
- Support FISMA, RMF, and ATO activities, including security categorization, system boundaries, SSPs, SAPs, SARs, POA&Ms, continuous monitoring, security assessments, risk decisions, and remediation evidence.
- Support assessment and approval of AI models, third-party AI services, cloud services, model providers, APIs, tools, and data-handling practices before their integration into DOL systems.
- Validate that approved cloud AI services satisfy applicable FedRAMP requirements and DOL authorization expectations.
- Ensure PII, CUI, prompts, retrieval context, embeddings, model outputs, logs, backups, and evaluation data are protected through approved controls.
- Support AI Incident Response Plan development and maintenance, including escalation paths, evidence preservation, reporting templates, severity classification, containment procedures, and post-incident review.
- Coordinate security incident investigation, containment, mitigation, recovery, and reporting for suspected or confirmed security events.
- Support supply-chain security, Software Bill of Materials generation, dependency scanning, secure-development attestations, vulnerability remediation, and third-party risk management.
- Collaborate with engineering teams to integrate security into development, testing, deployment, and production operations.
Required Qualifications
- Bachelor’s degree in cybersecurity, computer science, information assurance, engineering, information systems, or a related field.
- At least five years of experience in cybersecurity engineering, cloud security, application security, DevSecOps, security architecture, RMF/ATO, or comparable technical security roles.
- Experience with Federal cybersecurity frameworks, including FISMA, NIST SP 800-53, NIST SP 800-171, FIPS 199, FIPS 200, FedRAMP, and RMF/ATO.
- Experience securing cloud applications, APIs, data platforms, CI/CD pipelines, identity services, and containerized or cloud-native systems.
- Experience with vulnerability management, security logging and monitoring, incident response, security testing, and security documentation.
- Working knowledge of AI/ML security threats, including prompt injection, jailbreaking, model compromise, model extraction, data poisoning, RAG poisoning, retrieval manipulation, and AI supply-chain risks.
- Strong communication skills and ability to coordinate with engineering, privacy, governance, security, program-management, and Government stakeholders.
- Must be willing to work 3 days onsite at customer site in Washington, DC.
Preferred Qualifications
- CISSP, CCSP, CISM, Security+, AWS Security Specialty, Azure Security Engineer, GIAC, CEH, or comparable security certification.
- Experience with AI red teaming, AI threat modeling, OWASP Top 10 for LLM Applications, NIST AI RMF, CISA AI guidance, MITRE AI security frameworks, or adversarial ML testing.
- Experience with SIEM/SOAR, CSPM, secrets management, SAST/DAST, container security, SBOMs, software supply-chain assurance, and cloud security posture management.
- Experience with Federal civilian agencies, Government ATO packages, or FedRAMP environments.
Summary of Benefits
- 15 PTO days
- 11 paid holidays
- Medical Insurance with – 3 options (HSA with $600 Employer Contribution).
- Dental Insurance with no age limit orthodonture.
- Vision Insurance through EyeMed in and out of network coverage.
- Short Term and Long-Term Disability coverage with 100% premium support.
- Life insurance and AD&D with 100% premium support.
- Supplemental Life Insurance.
- Critical Care and Accident Insurance availability.
- Pet Insurance through Nationwide.
- Employee Assistance Program.
- 401k with enrollment from day one. 4% deferral by company.
- $1500 Annual Training Budget.
- $1500 Referral bonus.
- Eligibility for annual merit and discretionary bonus.
- Flexible work arrangements.
Equal Opportunity Employer Minority/Female/Veterans/Disabled
Penetration Tester Job Roles in Washington DC
See all Penetration Tester Jobs in Washington DC
Sign up for free to filter by visa type, set job alerts, and find employers with verified sponsorship history.
Search Penetration Tester Jobs in Washington DCPenetration Tester Jobs in Washington DC: Frequently Asked Questions
Which companies sponsor visas for penetration testers in Washington DC?
Federal contractors and cybersecurity consultancies drive most penetration tester sponsorship in Washington DC. Firms like Booz Allen Hamilton, Leidos, SAIC, Mandiant, and CrowdStrike have filed H-1B visa Labor Condition Applications for security-focused roles in the DC metro area. Larger defense and intelligence contractors tend to sponsor more consistently than boutique security shops, though active DOL filings change each year.
Which visa types realistically fit penetration tester roles in Washington DC?
Penetration testing qualifies as a specialty occupation under the H-1B, requiring a bachelor's degree in computer science, cybersecurity, or a directly related field. Australian nationals can pursue the E-3 visa, and Chilean and Singaporean nationals have access to the H-1B1 visa, both of which also require a specialty occupation degree. F-1 students with STEM-designated degrees in computing or cybersecurity may work under OPT or a 24-month STEM OPT extension while seeking full sponsorship. TN visa does not cover this role.
How to find penetration tester visa sponsorship jobs in Washington DC?
Migrate Mate lists Washington DC employers with verified H-1B and E-3 LCA filing history, searchable by role and location, so you can focus on companies already sponsoring cybersecurity and penetration testing positions. This is especially useful in DC, where federal contractor hiring cycles and clearance requirements can make standard job searches less transparent. Filtering by verified sponsorship history saves significant time.
Which cities in Washington DC have the most penetration tester sponsorship jobs?
Washington DC proper, along with the broader National Capital Region including Arlington and McLean in Virginia, concentrates the highest volume of sponsored penetration tester roles. Many of the largest employers, including federal agencies and their contractors, maintain offices in this corridor. Bethesda and Rockville in Maryland also have notable cybersecurity employer clusters tied to government health and intelligence contracting.
Are there any Washington DC-specific considerations for penetration testers seeking visa sponsorship?
Many DC-area penetration tester roles require a U.S. security clearance, which can complicate or delay sponsorship for international candidates, as clearance eligibility is generally restricted to U.S. citizens or permanent residents. Candidates on H-1B or other work visas are typically ineligible for classified work, so targeting roles that explicitly serve commercial clients rather than federal agencies is a practical approach when starting out on a sponsored visa.
What is the prevailing wage for sponsored penetration tester jobs in Washington DC?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.