Limited Cyberspace Operator

Booz Allen Hamilton; Maryland; On-site; USD 112,800 - 257,000; Full time

Benefits offered by this job

Health benefits

Tuition assistance

Professional development programs

Job summary

Booz Allen Hamilton is seeking a Limited Cyberspace Operator in Maryland to support cyberspace operations. The successful candidate will develop access strategies, conduct vulnerability assessments, and analyze enterprise environments. Candidates should have over 6 years of cyber operations experience, familiarity with tools like Burp Suite, and knowledge of Linux/Unix systems. A Bachelor’s degree or equivalent experience is required along with a TS/SCI clearance. The salary range for this position is between $112,800 and $257,000 annually, with comprehensive benefits.

Qualifications

• 6+ years of experience supporting and conducting cyber operations.
• Knowledge of Linux/Unix operating systems and endpoint forensic artifacts.
• Ability to navigate complex enterprise networks.

Responsibilities

• Developing and executing access development and target engagement operations.
• Conducting vulnerability enumeration and exploitation.
• Performing analysis of Linux/Unix operating systems.

Skills

Cyber operations support

Vulnerability enumeration and exploitation

Experience with cyber frameworks

Linux/Unix knowledge

Modern web application security

Network navigation

Education

Bachelor’s degree

Tools

Burp Suite

Metasploit

Cobalt Strike

Mythic

Job description

Limited Cyberspace Operator

As a Limited Cyberspace Operator, you will support cyberspace operations by developing and conducting access development, target engagement, and effect delivery on behalf of national security objectives. This role emphasizes tradecraft precision, long‑term operational viability, counterintelligence awareness, and compartmented mission execution.

Key Responsibilities

Your responsibilities will include:

• Developing and executing access development, target engagement, and effect delivery operations.
• Conducting vulnerability enumeration and exploitation.
• Assessing large‑scale enterprise environments across diverse technologies.
• Performing analysis of Linux/Unix operating systems and endpoint forensic artifacts.
• Applying modern web application security principles and OWASP guidance.
• Navigating complex enterprise networks, including pivoting, logging posture enumeration, and maintaining secure communication paths.

Required Qualifications

• 6+ years of experience supporting and conducting cyber operations.
• Experience with vulnerability enumeration and exploitation frameworks, including Burp Suite, Metasploit, Cobalt Strike, and Mythic.
• Experience assessing large‑scale enterprise environments with diverse technologies, including Windows and non‑Windows systems, hybrid infrastructures, segmented networks, and non‑traditional domain architectures.
• Knowledge of Linux/Unix operating systems and endpoint forensic artifacts, including storage subsystems, package management, system logging, persistence mechanisms, and incident response or threat hunting methodologies.
• Knowledge of modern web application security principles and common attack vectors, including authentication flaws, injection vulnerabilities, insecure deserialization, SSRF, XSS, and access control weaknesses aligned with OWASP guidance.
• Ability to navigate complex enterprise networks, including pivoting across systems, enumerating logging posture, differentiating secure subnets, and maintaining ingress or egress communication paths.
• TS/SCI clearance with a polygraph.
• Bachelor’s degree and 2+ years of experience conducting or planning cyber operations, or 6+ years of experience conducting or planning cyber operations in lieu of a degree.

Preferred Qualifications

• Experience with commercial offensive security training platforms such as Hack The Box, TryHackMe, and Proving Grounds, or participation in commercial bug bounty programs.
• Experience with databases, backend systems, and supporting infrastructure technologies.
• Experience scripting and programming focused on automating forensic, endpoint, and network operations.
• Knowledge of corporate network security best practices across network, server, and endpoint environments.
• Industry certifications such as OSCP, OSWE, or GXPN Certification.

Clearance

TS/SCI clearance with a polygraph is required. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Compensation & Benefits

Salary range: $112,800.00 to $257,000.00 annualized USD. Pay is determined by location, education, skills, and experience. The range reflects typical compensation for this position and is just one component of the total compensation package, which includes health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work‑life programs, and dependent care.

Equal Opportunity & EEO Statement

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.