Cyber Capabilities Engineer: Offensive & Defensive Tooling

The Amatriot Group; Chantilly (VA); On-site; USD 130,000 - 160,000; Full time

Job summary

The Amatriot Group is seeking a Cyber Capabilities Developer to support Rapid Application Development for offensive and defensive cybersecurity tools across Windows and Linux endpoints. The role emphasizes kernel and user-space work, vulnerability research, and open-source tooling usage.

Responsibilities span networked, virtualized environments, VMware/Proxmox/KVM/qemu, and cloud platforms (AWS/Azure/GCP), with a TS or higher clearance preferred and a focus on independent initiative.

Qualifications

• BS/BA with 2+ years of relevant experience or 6 years without degree.
• BS/BA with 6+ years of relevant experience or 10 years without degree.
• BS/BA with 10+ years of relevant experience or 14 years without degree.
• Advanced certifications or equivalent hands-on experience may substitute for years of experience.

Responsibilities

• Cyber Tool Development and Prototyping for Windows and Linux endpoints.
• Vulnerability research and analysis using open-source tools.
• Endpoint and persistence analysis at user and kernel levels.
• Network, cloud, and virtualized environment support including VPN/proxy/tunnel management and AWS/Azure/GCP.
• Leverage red team/blue team expertise to advance mission objectives.

Skills

Vulnerability assessment

Tool development

Windows/Linux prototyping

Kernel/User-space analysis

Networking fundamentals

Cloud platforms

Python/C/C++/C#.NET

Open-source tooling

Independent thinker

Education

BS/BA with 2+ years experience

BS/BA with 6+ years experience

BS/BA with 10+ years experience

Tools

VMware

Proxmox

KVM/qemu

Job description

The Amatriot Group is seeking a Cyber Capabilities Developer to support Rapid Application Development for offensive and defensive cybersecurity tools across Windows and Linux endpoints. The role emphasizes kernel and user-space work, vulnerability research, and open-source tooling usage.

Responsibilities span networked, virtualized environments, VMware/Proxmox/KVM/qemu, and cloud platforms (AWS/Azure/GCP), with a TS or higher clearance preferred and a focus on independent initiative.