Cyber Range Engineer (CRE)

Axiom Consultants; Norfolk (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Axiom Consultants is seeking a Cyber Range Engineer to provide technical and analytical support, program management, and training for tactics, techniques, and procedures in secure environments. The role requires working in a SCIF and delivering cyber range content and exercises for government personnel.

Candidates should bring five years of experience, strong network and security tooling knowledge, and the ability to develop, configure, and assess cyber ranges, while collaborating with

Qualifications

• Minimum five years experience providing technical SME to government personnel.
• Experience in five areas listed in the qualifications.
• Familiarity with NIST SP and defensive security techniques.
• Working knowledge of Puppet, Python, Javascript, Ruby, SQL.
• Experience with Navy concepts, doctrine, and TTPs.

Responsibilities

• Interface with stakeholders to gather training input including mission types, tools, and objectives.
• Define content tasks for range design, development, and configuration; range and user traffic automation.
• Configure security logging and data shipping in mission networks with HBSS, ACAS, CDS.
• Integrate virtualized and physical Defensive Cyberspace Operations toolkits.
• Build Cyber Gym Content in PCTE or similar environments.
• Update and maintain existing cyber range content.
• Analyze results from automated assessment tools to validate findings.
• Use tools like Core Impact, Nmap, Metasploit, Nessus for assessments.
• Research cyber actors' TTPs and integrate findings into Cyber Blue Teaming.
• Develop testing methodology for threat emulation and vulnerability validation.

Job description

Must have a TOP SECRET/SCI level security clearance. This position is 100% on-site. The entirety of the workspace is a Special Compartmented Information Facility (SCIF).

The Cyber Range Engineer (CRE) positionshall provide technical and analytical support, assistance, program management, and training for unique tactics, techniques, and procedures (TTP) and information technology.

QUALIFICATIONS REQUIRED:

This position will develop cyber ranges in various environments to give personnel the ability to practice using tools, techniques and procedures without manipulating or causing issues to an operational network.

Must possess a minimum of five (5) years of experience in providing highly technical subject matter expertise and expert guidance to government personnel in the execution of operations and demonstrated experience in at least five of the following areas:

• Intelligence background with excellent written and oral communications skills, and comfort with technology assisted training environments. Will generate exercise orders, background, intelligence documents, threat assessments, and will conduct cyberspace adversary and terrain research to inform scenario setting and timing and tempo.
• Cyberspace Operations background (DODIN Operations, DCO or OCO) from a leadership/operational/tactical level. Will contribute to building a realistic training scenario and provide leadership perspective on expected actions, plans, reporting and briefing.
• Network engineer with experience working in a virtualized environment. Will develop new infrastructure, or use existing ranges as needed to fulfill scenario requirements. Understand of physical/virtual networks, domains, security applications/appliances, traffic collection, and network monitoring is highly desired.
• Opposing force operations with the ability to use open source tools to emulate adversaries or TTPs based on scenario and terrain requirements. Will be responsible for building detailed operational plans and executing live and scripted actions in support of event rehearsal and execution. Good written and oral communications skill are critical to provide detailed feedback on actions taken to training audience.
• Hands-on experience performing Penetration Tests and Vulnerability Analysis for applications, network infrastructure and operating system infrastructures.
• Conduct system or database performance monitoring and tuning
• Conduct training programs for staff on current and newly developed cyber tools.
• Work closely with an internal cross-functional team to create and/or customize themes, plugins, and extensions to support vulnerability discovery and reporting.
• Developing, reviewing, and implementing mission area-related policy, doctrine, and development of Navy concepts, doctrine, tactics, techniques, and procedures.
• Identifying mission area-related concepts and technologies for examining technology, including protocols, languages, clients, and server architectures, from the attacker's perspective.
• Developing and supporting development of Navy mission areas-related operational concepts, tactics, and experimental concepts and technologies.
• Provide subject matter expertise and guidance utilizing tools and techniques to conduct cyber vulnerability assessments of public facing IP addresses.
• Familiarity with National Institute of Standards and Technology (NIST) Special Publications.
• Complete Content Range Engineer Basic Course
• Working knowledge of the following defensive security techniques and technologies:
  • Possess a technical education, certifications, or similar, from the following list:
  • Bachelor's or Master's in Cyber, Computer Science or related Engineering discipline
  • CompTIA Advanced Security Practitioner (CASP+)
  • Linux +
  • Cisco Certified Network Associate (CCNA)
  • Azure Administrator Associate
  • Azure Solutions Architect Expert
  • Azure Security Engineer Associate
  • AWS Solutions Architect Associate
  • AWS Solutions Architect Professional
  • AWS Security
  • VMware Certified Design Expert
• Have a working level ability with one or more of the below programing/declarative languages:
  • Puppet
  • Python
  • Javascript
  • Ruby
  • SQL
• Familiarity with Navy Information System Architecture.

REQUIRED DUTIES:

• Interface with stakeholders to gather training input including relevant mission type(s), tools, and training objectives
• Define the content architectural tasks needing completion to achieve range (network) design, development, and configuration; range and user traffic automation; and document creation
• Configure security logging and data shipping in mission network blue space configures security applications organic to mission networks (e.g., HBSS, ACAS, CDS)
• Facilitates integration of virtualized and physical Defensive Cyberspace Operations toolkits (e.g., DDS-M, CVA/H, DMSS)
• Build Cyber Gym Content in PCTE or other similar cyber environments.
• Update and maintain existing cyber range content.
• Analyze the results from automated assessment tools to validate findings, determine their business impact, and eliminate false positives.
• Use commercial and open source network cyber assessment tools (e.g. Core Impact, Nmap, Metasploit, and Nessus).
• Manually discover key application flaws.
• Research various cyber actors' TTPs, organizational structures, capabilities, personas, and environments, and integrate findings into Cyber Blue Teaming or penetration test operations.
• Develop and utilize testing methodology for threat emulation and vulnerability validation.

#CJ