Embedded System

Embedded System Cybersecurity Jobs

4 jobs found

Today

Cybersecurity Engineer

Gromelski & Associates, Inc. Manassas, VA

Manassas, VA

Today

Full time Certificate Management Cloud Infrastructure Cloud Native

Apply Now

Job Description

Gromelski & Associates, Inc. is seeking a cybersecurity engineering professional to support Rotary & Mission Systems Technical Operations. This role focuses on building new security architectures for a large and critical DoD system of systems, pairing hands-on cyber engineering with structured documentation and design review. You will work onsite in Manassas, VA and contribute to designs that take a critical approach to STIGs, while strengthening authorizations and continuous monitoring for classified environments.

Responsibilities

Provide cybersecurity engineering expertise by translating architectural needs into practical cyber solutions that fit mission and system goals.
Lead the documentation and review process for new designs, applying a critical approach to design compliance and STIGs.
Research new cybersecurity capabilities, perform trade studies, and share findings with peers and leadership.
Develop and maintain system documentation to support information system authorization, security management, and continuous monitoring across both networked and standalone classified systems.

Requirements

Experience in software system design and development.
Experience with devSecOps solutions.
Experience using the Agile Methodology.
Bachelor’s degree in a related discipline, or equivalent experience/combined education, with 5 years of professional experience; or 3 years of professional experience with a related master’s degree.
Ability to obtain and maintain a DoD Secret Clearance: must be a U.S. Citizen with no dual citizenship.
Proactive self-starter with a task-driven approach and the ability to work independently.
Team player who takes ownership and builds relationships that support overall team success.

Technologies

devSecOps
Linux systems
PKI
Kubernetes
containers
Python

Highly Desirable Skills

Knowledge of MBSE-based design.
Cyber engineering experience.
Knowledge of Linux systems and large system development.
Knowledge of PKI.
Cloud experience such as Kubernetes and containers.
Experience with scripting languages including Python.
Basic knowledge of networking exposure with the ability to understand packet captures.
Effective oral and written communication skills to collaborate with internal and external stakeholders.

Benefits

Gromelski & Associates, Inc. offers a competitive benefit package.

View full job page →

5d ago

Security Engineer III, Red Team Operator

Deloitte Rosslyn, VA

Rosslyn, VA

5d ago

$111k - $218k/yr Full time Active Directory Bloodhound Burp Suite

Apply Now

Job Description

Deloitte’s Cyber Defense & Resilience team is seeking a Security Engineer III to support authorized adversary emulation and assessment activities. In this role, you will plan and execute red team operations designed to test detection, response, and resilience across enterprise environments.

This onsite position is based in Rosslyn, VA, with a focus on realistic attack simulation, post-exploitation activities, and clear reporting back to technical and leadership stakeholders.

Responsibilities

Plan and execute red team operations across enterprise environments, web applications, cloud platforms, and endpoints.
Emulate advanced threat actors using realistic attack paths, tools, and techniques.
Run reconnaissance and simulation sequences for initial access, privilege escalation, lateral movement, persistence, and exfiltration.
Assess the effectiveness of security controls, monitoring, and incident response processes.
Conduct phishing, social engineering, and credential-focused exercises when explicitly authorized.
Develop custom payloads, scripts, and attack workflows to support engagements.
Document findings, attack chains, gaps in defenses, and recommendations for remediation.
Provide after-action reports and debriefs to technical and leadership stakeholders.
Partner with blue teams, detection engineers, and security leadership to strengthen defensive capabilities.
Follow strict rules of engagement, legal requirements, and operational safety procedures.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
Active Top-Secret Clearance.
Ability to work onsite up to 5 days a week.
Knowledge of network architecture, protocols, and techniques such as tunneling.
Hands-on offensive security experience in red teaming, purple teaming, or adversary simulation.
Strong understanding of enterprise attack techniques across Windows, Active Directory, Linux, cloud, and identity environments.
Experience with command and control frameworks, privilege escalation, lateral movement, and evasion techniques.
Tool proficiency including Cobalt Strike, Mythic, Metasploit, BloodHound, Burp Suite, Nmap, and PowerShell or Python.
Experience mapping to MITRE ATT&CK and performing threat emulation.
Ability to write high-quality reports that connect technical findings to business risk.
CRTO (Certified Red Team Operator) or OSCP (Offensive Security Certified Professional).
Ability to travel about 20% on average based on client needs and industries served.
Legal authorization to work in the United States without employer sponsorship, now or in the future.
Ability to work independently and collaborate with a team.
Effective written and verbal communication skills.
Meticulous attention to detail and strong work product quality.
Ability to build and sustain professional relationships.
Ability to lead projects or workstreams.
Capability to manage and prioritize multiple tasks in a fast-paced environment.
Strong interpersonal skills and professional demeanor.
Ability to meet deadlines.
Ability to provide clear guidance to others.

Technologies

Cobalt Strike, Mythic, Metasploit, BloodHound, Burp Suite, Nmap
PowerShell, Python
MITRE ATT&CK, Active Directory
Windows, Linux
C2 frameworks, Havoc, Sliver
AWS, Azure, GCP
SIEM, EDR

Preferred

Experience with C2 frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.
Experience with cloud red teaming in AWS, Azure, or GCP.
Familiarity with detection engineering, SIEM, EDR, and purple team exercises.
Experience developing custom tooling or modifying public offensive tools.
Knowledge of malware analysis, reverse engineering, or exploit development.

Compensation

The estimated wage range for this role is $110,700 - $218,300 per year, based on multiple factors used to determine compensation.

View full job page →

1mo ago

Cloud Security Engineer

Impulse Space Redondo Beach, CA

Redondo Beach, CA

1mo ago Closed

$135k - $165k/yr Full time Automation Aws Govcloud Azure Government

This position is no longer accepting applications (closed Aug 26, 2026).

Job Description

Impulse Space seeks a Cloud Security Engineer based in Redondo Beach, CA (onsite) to secure and harden multi-cloud infrastructure across Azure Government, AWS, and GCP, ensuring CMMC/NIST SP 800-171 compliance while embedding security into engineering workflows in the aerospace and defense space.

Responsibilities

Harden and secure cloud resources spanning Azure, AWS, and GCP.
Perform security assessments, threat modeling, and internal audits of cloud infrastructure.
Continuously monitor and enhance cloud security posture with Defender for Cloud and CSPM tools.
Design and enforce IAM controls including RBAC, least-privilege access, and conditional access policies.
Embed security checks within the CI/CD pipelines as part of DevSecOps.
Develop and manage secure infrastructure with Terraform.
Automate security workflows through scripting and infrastructure as code.
Support CMMC and NIST SP 800-171 initiatives, implementing controls and gathering evidence.
Assist in logging, monitoring, and detection integration using SIEM/XDR.
Collaborate with cross-functional teams to remediate security issues and strengthen overall posture.

Requirements

At least 4 years of hands-on experience in cloud, security, DevOps, or infrastructure roles.
Hands-on experience with one or more cloud platforms, with a preference for Azure.
Proficiency with Terraform or comparable infrastructure as code tools.
Knowledge of securing CI/CD pipelines.
Strong grasp of IAM, secrets management, and security best practices.
Working knowledge of CMMC, NIST SP 800-171, or related frameworks.

Technologies

Azure Government
AWS GovCloud
Google Cloud Platform (GCP)
Microsoft Defender for Cloud
Microsoft Sentinel
Terraform
Python
PowerShell
Bash
CSPM platforms
SIEM
XDR
Kubernetes

Benefits

Stock options (long-term incentives)
Medical, vision & dental coverage
401(k) retirement plan

View full job page →

1mo ago

Red Team Penetration Tester III

DirectViz Solutions, LLC Virginia Beach, VA

Virginia Beach, VA

1mo ago Closed

Full time .NET Active Directory Cybersecurity Tools

This position is no longer accepting applications (closed Aug 13, 2026).

Job Description

DirectViz Solutions, LLC seeks a seasoned Red Team Penetration Tester III to lead high-fidelity offensive assessments across diverse environments. This onsite role in Virginia Beach centers on executing sophisticated penetration tests, simulating real-world cyber threats, and surfacing security weaknesses to strengthen defenses. The position requires an active TS/SCI clearance to access sensitive engagement contexts.

Responsibilities

Plan, execute, and document advanced red team engagements and penetration tests.
Emulate advanced persistent threat behaviours to evaluate enterprise defenses.
Develop and utilize tools such as Metasploit, NMAP, Kali Linux, and Cobalt Strike.
Perform exploit development and scripting to mirror threat actor capabilities.
Identify gaps in existing security tools, processes, and defensive technologies.
Work with Linux, Windows, and macOS operating systems.
Utilize Active Directory to simulate lateral movement and privilege escalation scenarios.
Apply programming or scripting in at least two languages (e.g., Python, C++, Java, Rust, Assembly, C#).
Collaborate with Blue Teams and SOC personnel to provide findings and remediation recommendations.

Requirements

Bachelor’s Degree in Information Systems, Information Technology, Computer Science, or Computer Engineering.
Minimum of seven (7) years of full-time professional experience in penetration testing or offensive cyber operations.
Experience with penetration testing tools and red team frameworks.
Exploit development and threat simulation capabilities.
Proficiency with multiple operating systems and Active Directory environments.
Programming and scripting experience for custom tool development.
Strong analytical, problem-solving, and communication skills.
Active Secret Clearance or Higher.

Technologies

Metasploit
NMAP
Kali Linux
Cobalt Strike
Linux, Windows, macOS
Active Directory
Python
C++, Java
Rust, Assembly, C#
MITRE ATT&CK framework

Benefits

Competitive compensation
Comprehensive medical benefits
401(k) match
Generous PTO accrual
Professional development reimbursement
Corporate-funded technology certifications
Robust employee recognition and appreciation programs

Preferred Skills

Prior experience in government or defense-related red teaming environments.
Familiarity with the MITRE ATT&CK framework.
Experience conducting covert operations or purple team exercises.

Physical and Mental Qualifications

Maintain focus and awareness throughout scheduled working hours.
Perform tasks requiring prolonged periods of sitting or standing at a desk, using a computer, mouse, and keyboard.
Lift and move objects weighing up to 15 pounds as needed.
Exhibit excellent verbal and written communication skills in English.
Demonstrate the ability to work independently while collaborating effectively as part of a team.
Quickly learn and retain routine tasks and processes.
Remain organized with attention to detail, business correspondence proficiency, and self-management capabilities.
Perform essential functions with reasonable accommodations available upon request.
Accept and adapt to additional responsibilities or changes to assigned duties as determined by DirectViz Solutions (DVS).

Clearance

Active Secret Clearance or Higher

View full job page →

Embedded System Cybersecurity Jobs

Cybersecurity Engineer

Security Engineer III, Red Team Operator

Cloud Security Engineer

Red Team Penetration Tester III

Get Embedded System Cybersecurity Jobs alerts