Cybersecurity Engineer – Offensive Security, Penetration Testing & Vulnerability Management

Rohde & Schwarz (China) Technology Co., Ltd.; Frederick (MD); On-site; USD 100,000 - 140,000; Full time

Job summary

Rohde & Schwarz in Frederick, MD seeks a security professional to conduct vulnerability assessments, plan and execute authorized penetration tests, and analyze advisories to guide remediation. You will collaborate with engineering teams across regions to reproduce findings and improve security controls.

The role requires hands-on testing of networks, systems, IP devices, and applications, plus reporting and evidence collection to support customer deployments and FAT/SAT activities.

Qualifications

• Experience performing vulnerability assessments and security testing.
• Ability to analyze CVEs and advisories for remediation guidance.
• Familiarity with lab and customer test environments.

Responsibilities

• Perform vulnerability assessments of systems, networks, applications, operating systems, COTS products, appliances, and embedded devices.
• Plan, coordinate, and perform authorized penetration testing and security validation activities within controlled laboratory and customer environments.
• Identify security weaknesses, attack paths, insecure configurations, exposed services, and potential control deficiencies.
• Perform vulnerability scanning using tools such as Nessus, Nmap, and other approved security assessment tools.
• Analyze CVEs and vendor security advisories to determine applicability, exploitability, operational impact, and remediation requirements.
• Develop vulnerability assessment reports, technical findings, risk ratings, remediation recommendations, and supporting evidence.
• Maintain and improve vulnerability tracking and remediation processes throughout the system lifecycle.
• Validate remediation activities and verify that identified vulnerabilities have been appropriately mitigated.
• Perform network and protocol analysis using tools such as Wireshark and related diagnostic/security tools.
• Support security testing of IP networks, firewalls, switches, routers, Linux and Windows systems, VoIP systems, applications, and embedded devices.
• Evaluate system attack surfaces, trust boundaries, data flows, interfaces, authentication mechanisms, and externally accessible services.
• Participate in threat modeling, attack-path analysis, misuse-case development, and security architecture reviews.
• Work with engineering and R&D teams to reproduce security findings and develop practical remediation solutions.
• Support incident response, forensic analysis, and investigation activities when required.
• Contribute to System Security Plans, security assessment reports, risk assessments, customer documentation, and other cybersecurity deliverables.
• Support Factory Acceptance Testing (FAT), Site Acceptance Testing (SAT), customer deployments, onsite assessments, and witness testing.
• Develop scripts, tools, and repeatable methodologies to improve vulnerability assessment, security testing, evidence collection, and reporting.
• Research emerging threats, vulnerabilities, exploitation techniques, and defensive technologies relevant to Rohde & Schwarz products and customer environments.
• Collaborate with cybersecurity, product, and engineering teams in Europe and North America.
• Support the broader cybersecurity organization as priorities, programs, and customer requirements evolve.

Skills

Nessus

Nmap

Wireshark

Tools

Nessus

Nmap

Wireshark

Job description

• Perform vulnerability assessments of systems, networks, applications, operating systems, COTS products, appliances, and embedded devices.
• Plan, coordinate, and perform authorized penetration testing and security validation activities within controlled laboratory and customer environments.
• Identify security weaknesses, attack paths, insecure configurations, exposed services, and potential control deficiencies.
• Perform vulnerability scanning using tools such as Nessus, Nmap, and other approved security assessment tools.
• Analyze CVEs and vendor security advisories to determine applicability, exploitability, operational impact, and remediation requirements.
• Develop vulnerability assessment reports, technical findings, risk ratings, remediation recommendations, and supporting evidence.
• Maintain and improve vulnerability tracking and remediation processes throughout the system lifecycle.
• Validate remediation activities and verify that identified vulnerabilities have been appropriately mitigated.
• Perform network and protocol analysis using tools such as Wireshark and related diagnostic/security tools.
• Support security testing of IP networks, firewalls, switches, routers, Linux and Windows systems, VoIP systems, applications, and embedded devices.
• Evaluate system attack surfaces, trust boundaries, data flows, interfaces, authentication mechanisms, and externally accessible services.
• Participate in threat modeling, attack-path analysis, misuse-case development, and security architecture reviews.
• Work with engineering and R&D teams to reproduce security findings and develop practical remediation solutions.
• Support incident response, forensic analysis, and investigation activities when required.
• Contribute to System Security Plans, security assessment reports, risk assessments, customer documentation, and other cybersecurity deliverables.
• Support Factory Acceptance Testing (FAT), Site Acceptance Testing (SAT), customer deployments, onsite assessments, and witness testing.
• Develop scripts, tools, and repeatable methodologies to improve vulnerability assessment, security testing, evidence collection, and reporting.
• Research emerging threats, vulnerabilities, exploitation techniques, and defensive technologies relevant to Rohde & Schwarz products and customer environments.
• Collaborate with cybersecurity, product, and engineering teams in Europe and North America.
• Support the broader cybersecurity organization as priorities, programs, and customer requirements evolve.