Cyber Security Engineer (Red Team)

Scientific Research Corporation; Patuxent Highland (MD); On-site; USD 111,100 - 185,100; Full time

Job summary

Scientific Research Corporation seeks a Red Team member to independently establish vulnerability research environments, assess root causes, and design PoC mitigations for Navy cyber operations. You will perform static/dynamic analysis, code reviews, and develop PoC exploits to validate vulnerabilities and help implement robust patches.

The role requires a Bachelor’s in a related field, 5 years of cyber security experience or a master’s/advanced cert, Python proficiency, and TS/SCI clearance.

Qualifications

• Bachelor's degree or higher in a STEM field relevant to cyber security.
• 5 years of experience in cyber security vulnerability work, or a master’s degree/certifications in lieu of experience.
• DCWF qualification or within 60 days of on-boarding.
• Experience programming in Python and using GHIDRA/IDA Pro or similar tools.
• Strong technical communication and organizational skills.
• Active TS/SCI clearance required.

Responsibilities

• Establish vulnerability research environments and design PoC mitigations.
• Conduct threat intelligence research and maintain internal vulnerability databases.
• Perform static and dynamic analysis and code reviews to identify vulnerabilities.
• Develop functional PoC exploits and triage crash reports for exploitability/DoS.
• Prepare technical reports detailing vulnerability, root cause, impact, and reproduction steps.
• Collaborate with developers to design and implement patches.

Skills

Python programming

Reverse engineering tools

Technical communication

Security clearance

Education

Bachelor's degree in CS/Engineering/Software Engineering or related

Master's degree or advanced certifications in lieu of 5 years experience

Tools

GHIDRA

IDA Pro

Job description

Estimated Starting Salary Range: USD $111,100.00/Yr. - USD $185,100.00/Yr. Salary to be determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, and alignment with market data.

Description

Supports the United States Navy, Naval Air Warfare Center, Aircraft Division, Cyber Warfare Engineering Services. As a Red Team member, work independently to establish vulnerability research environments, assess the operational impact and understand the root-cause, and design proof-of-concept (PoC) mitigations.

• Threat intelligence and research synthesis: Research open-source intelligence, web forums, and security advisories to track adversarial tactics, techniques, and procedures. Develop and contribute to internal vulnerability databases to ensure threat signatures and severity metrics are accurate.
• Vulnerability discovery and analysis: Conduct static and dynamic analysis on applications and system components. Perform source code reviews to locate logical flaws, memory corruption vulnerabilities, and cryptographic weaknesses.
• Mitigation and remediation support: Use debugging, disassembling, and binary analysis tools to reverse-engineer compiled binaries. Develop functional, stable PoC exploits to validate the severity and reachability of discovered flaws. Triage crash reports generated by automated testing tools to determine if a vulnerability is exploitable or a denial-of-service (DoS) state. Collaborate with software developers and engineering teams to design and implement robust, long-term patches.
• Technical documentation and reporting: Prepare comprehensive, clear, and actionable technical reports detailing the vulnerability, root cause, impact, and reproduction steps. Translate complex binary and code-level findings into clear risk assessments for stakeholders and system administrators.
• Other duties consistent with the statement of work.
• This is an on-site position but may be eligible for a compressed work schedule.

Funding

Filling this position is contingent upon funding.

Requirements

• Bachelor’s degree from an accredited college or university in Computer Science, Engineering, Software Engineering or related technical discipline.
• 5 years of experience working in the area of cyber security vulnerability, or a master’s degree and/or advanced certifications in lieu of 5 years of experience.
• Qualified in at least one of the DoD Cyber Workforce Framework (DCWF) roles listed at https://www.cool.osd.mil/usn/cswf/indes.htm.?CWFModel , or obtain a DCWF qualification within 60 days of on-boarding.
• Experience programming in Python and using GHIDRA, IDA Pro, or other reverse engineering tools.
• Strong technical communication skills.
• Strong organizational skills, ability to capture, distill, and centralize pertinent information for informed decision making using existing communication tools.
• Active Top Secret security clearance and SCI access.

Desired Skills

• Knowledge of adversarial threat tactics, techniques, and procedures.
• Knowledge of naval aviation acquisition programs.
• Knowledge of/experience with aviation platforms.
• Certified in Microsoft or Linux operation.

Clearance Information

SRC is a contractor for the U.S. government. This position will require U.S. citizenship as well as a U.S. government security clearance at the Top Secret / SCI level.

Travel Requirements

• Less than 10%.

EEO

Scientific Research Corporation is an equal opportunity employer that does not discriminate in employment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law.

Scientific Research Corporation endeavors to make www.scires.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact [e-mail] for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.