Vulnerability Productization Engineer

Company Overview CCG; Poland; Remote; PLN 372,000 - 558,000; Full time

Job summary

CCG is a technology company focused on equipping customers to conduct intelligent cyber operations. As a Vulnerability Productization Engineer, you will join a Security Research team to analyze weaknesses in embedded devices, document findings, and help productize capabilities for real-world use.

You will work remotely, require DoD TS/SCI clearance, hold a technical degree, and apply Python or C/C++ with Docker experience to develop robust vulnerability testing and automation pipelines.

Qualifications

• Must have a DoD TS/SCI security clearance.
• Bachelor's degree in a technical field or equivalent industry experience.
• Solid understanding of computer networking principles.

Responsibilities

• Perform efficacy assessments to confirm vulnerability effectiveness on multiple versions of affected devices.
• Conduct manual testing to support automated testing capabilities.
• Provide feedback to developers on testing results and capability functionality.
• Design and document testing plans, scenarios, scripts, and procedures.
• Demonstrate capabilities to end users and train on capability use.

Skills

Networking fundamentals

Vulnerability research

Communication skills

Education

Bachelor's degree in Computer Engineering, Computer Science, Software Engineering, or related technical discipline

Tools

Python

C/C++

Docker

Job description

Position: Vulnerability Productization Engineer

Location: Remote

Job Id: 333-RR

# of Openings: 1

VULNERABILITY PRODUCTIZATION ENGINEER

Company Overview

CCG is a technology company focused on equipping customers with the capabilities and support to conduct intelligent and successful cyber operations. We do this by finding the most talented engineers and operators in the country, give them some of the most challenging problems facing the US government, and help them unleash their creativity and problem-solving skills. Excellence is our standard and mission success is our metric.

Role

As a member of the Security Research team, you will imagine weaknesses in multiple types of systems and then find, demonstrate/document, and exploit those weaknesses. You will be joining a team of mature and extremely competent Security Researchers to breakdown and fully understand how a host of different systems function. You will need to leverage extensive experience performing static and dynamic analysis and must be familiar with multiple classes of vulnerabilities. Additionally, you must be extremely comfortable communicating with team members, technical partners, and non-technical partners alike. You will support a mission that allows our customers to perform critical capabilities that address real national security.

This position will serve on one of our Embedded Device vulnerability research teams which focuses on productizing initial access capabilities that have been developed by other members of CCG.

Responsibilities

• Perform efficacy assessments to confirm vulnerability effectiveness on many versions of an affected device


• Perform manual testing as required and/or as needed to support the development of automated testing capabilities


• Provide feedback to developers regarding testing results and capability functionality


• Design and document testing plans, scenarios, scripts, training materials, and operation procedures


• Demonstrate capabilities to end users and provide training on capability use as needed


• Manage CI/CD Pipeline Integrations with the support of the developers


• Develop new payloads to support operational requirements

Minimum Qualifications

• Must be able to obtain a DoD TS/SCI security clearance


• Bachelors degree in Computer Engineering, Computer Science, Software Engineering, or a related technical discipline. Degree requirement can be met with adequate industry experience.


• Possess a general understanding of computer networking principles


• Possess a drive for excellence and quality; ability to place team success before self

Preferred Qualifications

• More than 2 years of relevant experience in the Cyber Operations domain


• Experience writing software in Python or C/C++


• Experience working with Docker/Containerized software

We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or Veteran status.