Cyber Security Engineer / CSET
Scientific Research Corporation5 months ago
Orlando, FL, USASenior
Responsibilities
- Execute red-team and adversarial-emulation engagements across networks, operating systems, applications, and other target environments.
- Perform open-source intelligence gathering, vulnerability scanning, exploitation, lateral movement, persistence, command-and-control management, and endpoint-detection evasion.
- Develop payloads, scripts, tools, accelerators, and processes for exploitation, evasion, lateral movement, and security-team scale.
- Conduct source-code review, software debugging, reverse engineering, application fuzzing, and exploit development to identify programming flaws.
- Develop security testing strategies and assess whether security controls are appropriately designed and operating effectively.
- Document exploitation activities and vulnerabilities, research remediation actions, and recommend risk-mitigation techniques.
- Demonstrate vulnerabilities to blue teams and assist with improving defensive detection capabilities.
- Communicate technical findings, requirements, estimates, and recommendations to technical and non-technical stakeholders.
Requirements
- Bachelor’s degree focused on computer science, computer information systems, engineering, mathematics, management information systems, cybersecurity, cyber operations, or a related discipline.
- At least 5 years of cyber adversarial-emulation experience, including penetration testing of modern Windows and Linux operating systems, IP-based networks and protocols, 802.11 networks, web applications, hardware hacking, software-defined networks, and/or RF.
- Intermediate knowledge of Advanced Persistent Threat techniques, tactics, and procedures, including MITRE ATT&CK terminology.
- Intermediate knowledge of exploit-development techniques, operating-system tools, software debugging, and application fuzzing.
- Intermediate knowledge of incident response, reverse engineering, and digital-forensics tools and techniques.
- Superior oral communication and technical-writing skills, including formal presentations, stakeholder engagement, technical briefings, and review of CSET documentation.
- Ability to work independently and collaborate with range leadership, event leadership, CSET members, users, and other stakeholders.
- Maintain IAT Level III or IAM Level III certification, including one or more listed certifications such as CASP+ CE, CCNP Security, CISA, GCIH, GCED, CISM, GSLC, CCISO, or CISSP.
- Obtain one or more of OSCE, OSCP, GXPN, or OSCE3 certifications within six months of hire.
- Meet applicable DoD 8570 or SECNAV 5239.2 cybersecurity workforce requirements.
- U.S. citizenship and eligibility for a U.S. government Top Secret / SCI security clearance are required.
- Experience supporting Department of Defense offensive or defensive cyber operations, operational training programs, or Red Team, Computer Operator, or Exploitation Analyst teams is desired.
- Experience with OT, IoT, or XIoT is a plus.
Benefits
- Medical, dental, and vision plans.
- 401(k) plan with company match.
- Life insurance.
- Paid vacation and sick time off, with accrual amounts increasing based on role and years of service.
- 11 paid holidays.
- Tuition reimbursement.
- Work environment that encourages excellence.
- The position is associated with U.S. government contracting, requires U.S. citizenship and a Top Secret / SCI clearance, and lists no travel requirement.
About Scientific Research Corporation
Scientific Research Corporation is a privately held engineering services and systems integration firm that builds and sustains communications, C4ISR, electronic warfare, radar, and simulation/instrumentation systems for U.S. defense and government customers and international markets. Founded in 1988 and headquartered in Atlanta, it delivers design, integration, test, and lifecycle support under contract, with engineering offices across the United States.