Cybersecurity Engineer

• Work on a small team of cyber engineers to perform security assessments in search of vulnerabilities and identify mitigations.
• Conduct vulnerability assessments on web applications, networked devices, standalone software products, and other technologies as assigned using the penetration testing life cycle.
• Maintain test efficacy by identifying and applying new testing tools and techniques.
• Conduct research and development efforts to explore current and emerging technologies.
• Travel up to 10% of the time

Qualifications:

• An active DoD Secret Clearance
• The ability to obtain a TS/SCI clearance
• All work is performed on site at APG, MD. Telework is not available.
• DoD 8570 IAT Level II certification (Security+ or equivalent).
• Must have 5+ years of experience with offensive security/penetration testing tools and methodologies to assess technologies for vulnerabilities and exploits at the network and application levels.
• Intermediate knowledge of Linux and Windows internals.
• Thorough technical understanding of networking protocols, hardware, and software.
• Ability to interpret network traffic to understand communications and identify security vulnerabilities using Wireshark, Burp Suite, etc.
• Familiarity with hypervisor virtualization (VMware, VirtualBox, ESXi).
• Ability to effectively communicate through written and verbal means, to include conveying technical information to team members, leadership, and clients.
• Must be able to work in a secure SCIF lab setting (no phones, wireless or Bluetooth devices, outside technology permitted).
• Work efficiently both individually and as a team.

Desired:

• An active DoD TS/SCI clearance.
• OSCP or equivalent certification.
• Basic cryptography knowledge.
• Basic programming / scripting experience (Python, Java, C/C++, bash).
• Code analysis and reverse engineering experience.
• Chip-off / Fault-injection / and similar hardware hacking knowledge

Familiarity with COTS/GOTS radios, SDRs, and RF concepts.