Cybersecurity Engineer – Offensive Security, Penetration Testing & Vulnerability Management

ROHDE & SCHWARZ GmbH & Co. KG; Frederick (MD); On-site; USD 95,000 - 140,000; Full time

Job summary

Rohde & Schwarz GmbH & Co. KG is seeking a security testing professional in Frederick, MD to perform vulnerability assessments across heterogeneous environments, coordinate authorized testing, and deliver actionable remediation guidance.

The role involves collaborating with Europe and North America teams, analyzing CVEs, and supporting incident response and forensic activities as needed.

Qualifications

• Experience planning and executing authorized penetration testing.
• Ability to analyze CVEs and security advisories for remediation.
• Familiarity with vulnerability tracking and remediation processes.

Responsibilities

• Perform vulnerability assessments of systems, networks, applications, OS, COTS products, appliances, and embedded devices.
• Plan, coordinate, and perform authorized penetration testing within controlled labs and customer environments.
• Identify security weaknesses, attack paths, insecure configurations, exposed services, and potential control deficiencies.
• Develop vulnerability assessment reports, technical findings, risk ratings, remediation recommendations, and supporting evidence.
• Maintain and improve vulnerability tracking and remediation processes throughout the system lifecycle.
• Validate remediation activities and verify mitigation of identified vulnerabilities.
• Collaborate with engineering and R&D teams to reproduce findings and develop practical remediation solutions.
• Support incident response, forensic analysis, and investigation activities when required.
• Contribute to cybersecurity deliverables like System Security Plans and risk assessments.

Skills

Vulnerability assessment

Penetration testing

Threat modeling

Security architecture

Incident response

Tools

Nessus

Nmap

Wireshark

Assessment tools

Job description

• Perform vulnerability assessments of systems, networks, applications, operating systems, COTS products, appliances, and embedded devices.
• Plan, coordinate, and perform authorized penetration testing and security validation activities within controlled laboratory and customer environments.
• Identify security weaknesses, attack paths, insecure configurations, exposed services, and potential control deficiencies.
• Perform vulnerability scanning using tools such as Nessus, Nmap, and other approved security assessment tools.
• Analyze CVEs and vendor security advisories to determine applicability, exploitability, operational impact, and remediation requirements.
• Develop vulnerability assessment reports, technical findings, risk ratings, remediation recommendations, and supporting evidence.
• Maintain and improve vulnerability tracking and remediation processes throughout the system lifecycle.
• Validate remediation activities and verify that identified vulnerabilities have been appropriately mitigated.
• Perform network and protocol analysis using tools such as Wireshark and related diagnostic/security tools.
• Support security testing of IP networks, firewalls, switches, routers, Linux and Windows systems, VoIP systems, applications, and embedded devices.
• Evaluate system attack surfaces, trust boundaries, data flows, interfaces, authentication mechanisms, and externally accessible services.
• Participate in threat modeling, attack-path analysis, misuse-case development, and security architecture reviews.
• Work with engineering and R&D teams to reproduce security findings and develop practical remediation solutions.
• Support incident response, forensic analysis, and investigation activities when required.
• Contribute to System Security Plans, security assessment reports, risk assessments, customer documentation, and other cybersecurity deliverables.
• Support Factory Acceptance Testing (FAT), Site Acceptance Testing (SAT), customer deployments, onsite assessments, and witness testing.
• Develop scripts, tools, and repeatable methodologies to improve vulnerability assessment, security testing, evidence collection, and reporting.
• Research emerging threats, vulnerabilities, exploitation techniques, and defensive technologies relevant to Rohde & Schwarz products and customer environments.
• Collaborate with cybersecurity, product, and engineering teams in Europe and North America.
• Support the broader cybersecurity organization as priorities, programs, and customer requirements evolve.