Penetration Testing Team Lead

Richmond, Virginia, United StatesWebsite

Full details on LinkedIn

The complete job description, requirements, and application details are available on the original posting.

About ECS

ECS (ECS Federal, LLC) is a technology and services company based in Fairfax, Virginia, founded in 1993. With nearly 4,000 employees, ECS specializes in advanced solutions across various sectors, including science, engineering, cloud, cybersecurity, artificial intelligence, and data. The company focuses on delivering mission-critical technology solutions that support military operations, veterans' healthcare, and enhance collaboration and productivity for both federal and commercial clients. ECS offers a wide range of services, including AI and machine learning solutions, cloud migration, cybersecurity operations, IT managed services, software development, and enterprise transformation initiatives. The company emphasizes a customer-first approach and maintains strong partnerships with leading technology providers. ECS serves a diverse clientele, including military and federal civilian agencies, as well as commercial clients, and operates with a commitment to quality and innovation.

Industry

information technology & services

Employees

3,900

685 engineers

Revenue

$589M

Website

Visit →

Security at ECS

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

ECS emphasizes an "invisible zero trust" approach that shifts the burden of verification from users to infrastructure.
The philosophy prioritizes developer enablement, stating "if a zero trust implementation makes life harder for users, it's already failing." The company also emphasizes that AI security requires the same rigor as cybersecurity, and advocates for preemptive cyber approaches rather than reactive breach response.

Security Team

The AppSec team is integrated into the broader Cybersecurity Center of Excellence, led by Vice President of Cybersecurity Scott Hoge.
No dedicated Application Security team or manager is publicly identified.
Security functions appear distributed across the cybersecurity organization with common patterns including network and web-based application security and investigation of complex computer and information security incidents.

Key Initiatives

Security initiatives include zero-trust principles fully compliant with DoD and IC standards.
The organization conducts adversarial red-teaming and formal privacy evaluation for sensitive models.
Recent initiatives focus on moving at AI speed without compromising security.
However, no public documentation exists for AppSec-run secure SDLC artifacts, security champions programs, or specific remediation SLAs.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on LinkedIn