Penetration Tester-Cyber Engineer

Role context: Penetration Tester support for critical defense missions at Aberdeen Proving Ground, Maryland, focused on penetration testing and threat-hunting on advanced systems.

Responsibilities

• Conduct hands-on work with the latest electronics and cutting-edge technology
• Perform in-depth assessments and analysis of sophisticated systems using penetration testing and threat-hunting techniques
• Collaborate with a multi-disciplinary engineering team to address real-world cybersecurity problems

On-site & clearance

• 100% on-site work at Aberdeen Proving Ground, Maryland
• Active Secret clearance required
• Potential to obtain TS/SCI

Requirements

• 5+ years of relevant experience
• Bachelor’s degree in a related field
• Professional experience in penetration testing or threat hunting
• Proven experience with grey-box and black-box penetration testing
• Strong understanding of OWASP Top 10 and DoD/NSA or industry-standard Vulnerability and Penetration Testing Standards
• Proficiency with penetration testing tools including Nmap, Wireshark, Burp Suite, Nessus, and similar utilities
• Extensive knowledge of Linux operating systems
• Expertise with exploitation techniques including buffer overflows, fuzzing, SQL injection, Man-in-the-Middle attacks, covert channels, secure tunneling, XSS, privilege escalation, and lateral movement
• Working knowledge of networking, TCP/IP, virtualization, and web services
• Familiarity with interfacing with electronic hardware, including taking apart devices and identifying hardware components
• Minimum 2–3 years of exploitation experience

Technologies

• Nmap
• Wireshark
• Burp Suite
• Nessus
• Linux
• OWASP Top 10

Travel

• Up to 25% travel within the Continental US

Desired qualifications

• Active TS/SCI
• Certifications such as OSCP, OSCE, GPEN, GWAPT, GXPN, CEH, or CISSP
• Experience in malware analysis or digital computer forensics
• Scripting skills in Bash, Python, Perl, or Ruby
• Systems programming experience
• Interest in emerging penetration testing technologies and techniques
• Familiarity with Android operating systems
• Knowledge of UAS/UxS technologies
• Understanding of radios and radio protocols
• Experience analyzing embedded devices
• Ability to develop and present proof-of-concepts to demonstrate exploitation techniques

Location: Aberdeen, MD (onsite)

Compensation: USD 100,000 - 185,000 per year