Red Team Penetration Tester IV

Scientific Research Corporation; England; On-site; GBP 45,000 - 85,000; Full time

Job summary

An advanced information technology and engineering company is seeking a Cybersecurity Engineer to enhance naval warfare systems' security. This role involves conducting penetration testing, developing secure designs, and ensuring Cyber-resilience throughout the systems' life-cycle. The ideal candidate will possess a strong background in offensive security, hold relevant certifications, and have extensive experience in Cyber operations. Join a team of skilled engineers and scientists dedicated to delivering innovative solutions for government and private sectors. This is an exciting opportunity to make a significant impact in the field of Cybersecurity.

Benefits

Medical, dental, and vision plans

401(k) with company match

Life insurance

Paid vacation and sick leave

Tuition reimbursement

11 paid holidays

Qualifications

• Must have 10 years of experience in penetration testing and offensive Cyber operations.
• DoD Top Secret clearance and CSSP Auditor certification required.

Responsibilities

• Provide engineering and Cybersecurity support to Navy and Marine Corps.
• Conduct analysis, secure design, and Test and Evaluation for Cybersecurity.

Skills

Penetration Testing

Offensive Security

Cyber Operations

Scripting (Python, C++, Java, Rust, Assembly)

Threat Behavior Mimicking

Exploit Development

Systems Analysis

Life-Cycle Management

Education

Bachelor of Science in Computer Science

Bachelor of Science in Computer Engineering

Tools

Metasploit

NMAP

Kali Linux

Cobalt Strike

Active Directory

Job description

Description

The Naval Surface Warfare Center Dahlgren Division (NSWCDD) Dam Neck Activity’s (DNA) work is focused on providing engineering, acquisition, logistical, and Cybersecurity (CS) support to the Navy, Marine Corps, Special Warfare Coalition, and Joint Forces for programs including but not limited to Common Total Ship Computing Environment (TSCE), Atlanta Weapon System (AtWS), NAVSEA Red Team, National Cyber Range Complex (NCRC), surface and sub training systems, and Risk Management Framework (RMF) Support for Explosive Ordinance Disposal (EOD).

With the growing number of breaches of tactical and non-tactical computer systems, there is an increasing need to focus on the engineering aspects of CS. CS continues to be approached as compliance-based and this has not addressed significant shortcomings and vulnerabilities in the security of naval warfare systems and other service warfare systems. CS requirements must be included during the design, development, and sustainment phases of systems acquisition to ensure they are secure and Cyber-resilient throughout their Life-Cycle. Additionally, previously designed, and fielded systems must be evaluated on an engineering basis to determine potential changes to their design or supportability approaches.

Each have a requirement for CS engineering services that includes requirements for: analysis, secure design, Test and Evaluation (T&E), systems analysis and assessment, and Life-Cycle management.

FILLING THIS POSITION IS CONTINGENT UPON AWARD

Requirements

• Bachelor of Science in Computer Science, or Bachelor of Science in Computer Engineering
• Must have one of the following:
  • Offensive Security Certified Professional (OSCP), or Offensive Security Certified Expert (OSCE), or Offensive Security Exploitation Expert (OSEE), or Offensive Security Wireless Professional (OSWP) certification
• Must currently possess a DoD Top Secret clearance
• Must currently possess Current CSSP Auditor certification
• Ten (10) years of full-time professional experience conducting penetration testing and/or offensive Cyber operations including demonstrated experience in each of the following areas:
  • Developing and utilizing penetration tools such as Metasploit, NMAP, Kali Linux, Cobalt Strike
  • Mimicking threat behavior
  • Utilizing various operating systems (Linux, Windows, MAC OS)
  • Utilizing Active Directory
  • Exploit development
  • Identifying gaps in tools and development techniques
  • Three scripting or programming languages (python, C++, Java, Rust, Assembly, etc.)

Desired Skills

• Advanced Cyber Networking Certifications
• Cisco Certified Network Professional (CCNP) certification
• CCIE (Cisco Certified Internetwork Expert)
• CISSP (Certified Information Systems Security Professional)

Clearance Information

SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE TOP SECRET / SCI LEVEL

Travel Requirements

• 50-75% CONUS and OCONUS travel may be required

About Us

Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients.

SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals starting at 10 days of vacation and 5 days of sick leave annually, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more.

Diversity & Inclusion

We strongly believe in the abundance of differences among individuals. We value different points of view and appreciate diverse perspectives. We truly believe this is what makes our organization inclusive and more responsive to the needs of our diverse customers.

EEO

Scientific Research Corporation is an equal opportunity employer that does not discriminate in employment.

All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law.