Limited Cyberspace Operator

Booz Allen Hamilton; Annapolis (MD); On-site; USD 112,800 - 257,000; Full time

Benefits offered by this job

Health and retirement benefits

Paid leave

Tuition assistance

Job summary

Booz Allen Hamilton in Annapolis, Maryland is seeking a Limited Cyberspace Operator to support cyberspace operations. This role involves developing access strategies and conducting operations vital for national security. Candidates should have over 6 years in cyber operations, including experience with vulnerability tools and a solid understanding of Linux/Unix systems. TS/SCI clearance is required. The salary ranges from $112,800 to $257,000 annually, complemented by extensive health and professional development benefits.

Qualifications

• 6+ years of experience supporting and conducting cyber operations.
• Ability to navigate complex enterprise networks.
• Knowledge of modern web application security principles.

Responsibilities

• Develop and execute access development, target engagement, and effect delivery.
• Conduct vulnerability enumeration and exploitation.
• Perform analysis of Linux/Unix systems and forensic artifacts.

Skills

Experience supporting and conducting cyber operations

Vulnerability enumeration and exploitation frameworks

Assessing enterprise environments

Knowledge of Linux/Unix systems

Modern web application security principles

Navigating complex enterprise networks

TS/SCI clearance with a polygraph

Education

Bachelor’s degree or equivalent experience

Tools

Burp Suite

Metasploit

Cobalt Strike

Mythic

Job description

Limited Cyberspace Operator

As a Limited Cyberspace Operator, you will support cyberspace operations by developing and conducting access development, target engagement, and effect delivery on behalf of national security objectives. This role emphasizes tradecraft precision, long‑term operational viability, counterintelligence awareness, and compartmented mission execution.

Key Responsibilities

Your responsibilities will include:

• Developing and executing access development, target engagement, and effect delivery operations.
• Conducting vulnerability enumeration and exploitation.
• Assessing large‑scale enterprise environments across diverse technologies.
• Performing analysis of Linux/Unix operating systems and endpoint forensic artifacts.
• Applying modern web application security principles and OWASP guidance.
• Navigating complex enterprise networks, including pivoting, logging posture enumeration, and maintaining secure communication paths.

Required Qualifications

• 6+ years of experience supporting and conducting cyber operations.
• Experience with vulnerability enumeration and exploitation frameworks, including Burp Suite, Metasploit, Cobalt Strike, and Mythic.
• Experience assessing large‑scale enterprise environments with diverse technologies, including Windows and non‑Windows systems, hybrid infrastructures, segmented networks, and non‑traditional domain architectures.
• Knowledge of Linux/Unix operating systems and endpoint forensic artifacts, including storage subsystems, package management, system logging, persistence mechanisms, and incident response or threat hunting methodologies.
• Knowledge of modern web application security principles and common attack vectors, including authentication flaws, injection vulnerabilities, insecure deserialization, SSRF, XSS, and access control weaknesses aligned with OWASP guidance.
• Ability to navigate complex enterprise networks, including pivoting across systems, enumerating logging posture, differentiating secure subnets, and maintaining ingress or egress communication paths.
• TS/SCI clearance with a polygraph.
• Bachelor’s degree and 2+ years of experience conducting or planning cyber operations, or 6+ years of experience conducting or planning cyber operations in lieu of a degree.

Preferred Qualifications

• Experience with commercial offensive security training platforms such as Hack The Box, TryHackMe, and Proving Grounds, or participation in commercial bug bounty programs.
• Experience with databases, backend systems, and supporting infrastructure technologies.
• Experience scripting and programming focused on automating forensic, endpoint, and network operations.
• Knowledge of corporate network security best practices across network, server, and endpoint environments.
• Industry certifications such as OSCP, OSWE, or GXPN Certification.

Clearance

TS/SCI clearance with a polygraph is required. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Compensation & Benefits

Salary range: $112,800.00 to $257,000.00 annualized USD. Pay is determined by location, education, skills, and experience. The range reflects typical compensation for this position and is just one component of the total compensation package, which includes health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work‑life programs, and dependent care.

Equal Opportunity & EEO Statement

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.