Cyber Security Engineer

About the role

We are seeking an experienced penetration tester to conduct penetration testing and ethical hacking, targeting, assessing, and exploiting risk and vulnerabilities of information systems. This position is located on-site in Herndon, VA.

Responsibilities

• Provide senior decision makers with documented and actionable data to aid in making strategic investment decisions.
• Document all identified system risks, planned test procedures, and results.
• Analyze vulnerabilities identified during testing.
• Review program-level documentation (e.g., requirements specification, system architecture, design documents, test plans, security plans, etc.).
• Recommend changes to program-level documentation with an eye to reducing system vulnerabilities.
• Create and document penetration testing plans and procedures, and approved testing plans and procedures to conduct hands-on penetration testing.
• Analyze test results, document risks, and recommend countermeasures to uncovered risks.
• Participate or lead technical exchange meetings and application review boards.
• Document action items and results from technical exchange meetings and application review boards.
• Brief management on the status of action items and results of activities.

Requirements

• Demonstrated work experience in cyber security or related IT field.
• Demonstrated experience with cyber penetration testing.
• Demonstrated experience applying computer attack methods and system exploitation techniques.
• Demonstrated working knowledge of cyber security principles for Linux, Windows, and virtual platforms.
• Demonstrated experience designing, testing, or implementing IT security architecture.
• Demonstrated experience performing network security analysis.
• Demonstrated experience analyzing network architectures.
• Demonstrated experience using network management tools.
• Demonstrated experience leveraging adversarial tactics to conduct hands-on security testing.
• Demonstrated experience developing risk management methodologies.
• Demonstrated experience analyzing test results to develop risk and threat mitigation plans.
• Demonstrated experience testing or reviewing system configuration, development, and design specifically around enterprise systems and hypervisors.
• Demonstrated experience designing, testing, or implementing complex Windows installations.

Qualifications

• Must possess active TS/SCI + Polygraph.
• A Bachelor's Degree in Computer Science, Information Systems, Engineering, or other related scientific or technical discipline is desired.
• Relevant experience (4+ years) may be substituted for degree.

Skills

• Desired Skills and Experience:
• Participating in public and private information security groups and organizations.
• Communicating vulnerability results and risk posture to senior executives.
• Researching, evaluating, and developing security policies and guidance.
• Performing complex technical tasks with minimal direction.

Benefits

N/A

Pay

The anticipated salary range for this role is $190,000 to $210,000 annually.

Schedule

N/A