Cyber Security Evaluation Team (CSET) Member

Command Post Technologies, Inc; Patuxent Highland (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

Command Post Technologies, Inc. is seeking a Cyber Security Evaluation Team (CSET) Member to support the DoD National Cyber Range Complex.

You will conduct adversarial threat emulation and penetration testing on aeronautical systems and government networks, working on-site at Patuxent River, Maryland with a Top-Secret clearance. The role requires 10+ years in pen testing or red team operations, strong tool experience, and the ability to work in a diverse team environment.

Qualifications

• Must hold a current Top-Secret clearance with SCI eligibility
• Bachelor’s degree or equivalent experience in a related discipline
• 10+ years of pen testing, red team operations, or offensive security
• Experience using Metasploit, Burp Suite, Cobalt Strike, NMAP, Core Impact
• Working knowledge of IP networks, routing, switching, and protocols
• Certifications such as CISSP or CEH or equivalents required or pursued

Responsibilities

• Perform adversarial threat emulation (Red Teaming) and penetration testing on aeronautical systems
• Assess government networks including Windows domains, Linux systems, and network devices
• Develop and apply advanced penetration testing concepts and tactics
• Identify vulnerabilities and security gaps in operational networks and programs

Skills

Penetration testing

Red team operations

Open source tools

Network protocols

Adversarial emulation

Education

Bachelor's degree or higher

Tools

Metasploit

Burp Suite

Cobalt Strike

NMAP

Core Impact

Job description

Command Post Technologies is seeking a Cyber Security Evaluation Team (CSET) Member to support the Department of Defense (DoD) National Cyber Range Complex (NCRC).

The National Cyber Range Complex provides training support, cyber risk assessments, and cyber testing. It enables cyber forces to train as they fight as well as support to program offices with closed-loop systems of systems to safely and securely assess vulnerabilities and impacts to mission.

The range is an operationally representative networked environment with reconfigurable architecture at various classification levels. The facility features radio frequency enabled communications devices and hardware-in-the-loop system components for highly scalable red, blue, and gray commercial as well as government environments. The team can also support cyber table tops featuring opposing forces and post event analysis.

This facility supports the mission to provide realistic cybersecurity environments for test and evaluation of major DoD acquisition programs and to enable the conduct of realistic training and certification events for the DoD Cyber Mission Force. The NCRC facility may also support non-DoD customers such as Department of Homeland Security (DHS), industry, academia, and international partners.

The successful candidate will serve on-site at the Patuxent River, Maryland site. This position currently requires an on-site schedule with 5 days on-site. Position may require flexible weekend and/or evening shift work, as needed. Schedule is subject to change based on company/contract requirements.

Key Responsibilities

• Working closely with our government customer, perform adversarial threat emulation (Red Teaming) and penetration testing to assess the performance of aeronautical systems, subsystems, and equipment (platform IT).
• Working closely with our government customer, perform adversarial threat emulation (Red Teaming) and penetration testing assessments on government networks including Windows domains, Linux systems, switches, routers, and other connected network devices.
• Apply and/or develop highly advanced principles, concepts, and tactics for penetration testing. ?
• Identify issues and vulnerabilities associated with operational networks and programs.

Travel

Up to 10% of the time to CONUS sites as required.

Requirements

• All applicants for this position must hold a current Top-Secret clearance with the ability to obtain and maintain SCI eligibility
• Bachelor’s degree from an accredited college in a related discipline, or equivalent experience/combined education and/or advanced certification.
• At least 10 years of pen testing, red team operations, and/or offensive security experience including experience conducting on-net assessments
• Experience operating open source and commercial tools such as Metasploit, Burp Suite, Cobalt Strike, NMAP, Core Impact, etc.
• Working knowledge of IP network protocols, subnetting, routing, switching, etc.
• Experience in one or more of the following cybersecurity disciplines:
• Penetration testing of modern Windows and Linux operating systems and IP-based networks
• Exploit and malware development targeting modern operating systems and defenses
• Hardware hacking
• Cryptography
• Control systems
• Ability to work in a diverse team environment
• Industry certification of EC-Council Certified Ethical Hacker (C|EH) and ISC2 Certified Information Systems Security Professional (CISSP) or their equivalents are required
• Be able to obtain one or more of the following vendor certifications within 6 months of being hired:
• Offensive Security Certified Engineer (OSCE)
• Offensive Security Certified Professional (OSCP)
• GIAC Certified Exploit Researcher and Advanced Penetration Testers (GXPN)

Desired Qualifications

• Cyber related military training courses such as Title 10 Interactive On-Net Operator Course, Joint Cyber Analysis Course (JCAC), and Cyber Operations Specialist Qualification Course
• Industry certification of Offensive Security Certified Professional (OSCP) is highly desirable
• Specialization in web application penetration testing is a plus
• Experience with WiFi and/or Software Defined Radio (SDR) hacking is a plus
• Experience with red team / adversarial emulations is a plus
• Experience executing Close Access Team (CAT) assessments is a plus
• Experience with weapon systems assessments is a major plus
• Experience with bash scripting, Python, and/or PowerShell is a major plus
• Experience working in a cyber range is a major plus