Red Team Penetration Tester III with Security Clearance

Scientific Research Corporation; Norfolk (VA); On-site; USD 80,000 - 120,000; Full time

Job summary

An advanced technology firm is seeking a Red Team Penetration Tester III with a focus on Cybersecurity. This role involves providing critical engineering and Cyber support to various military programs, ensuring systems are secure and resilient. The ideal candidate will have extensive experience in penetration testing, utilizing tools like Metasploit and NMAP, and must possess a DoD Top Secret clearance. This position offers an exciting opportunity to contribute to national security while working in a collaborative environment that values innovation and diversity. Join a team that is dedicated to delivering cutting-edge solutions and making a significant impact in the field of Cybersecurity.

Benefits

Medical, dental, and vision plans

401(k) with company match

Life insurance

Paid vacation and sick leave

Tuition reimbursement

11 paid holidays

Qualifications

• Must have prior Red Team experience and CSSP Auditor certification.
• Seven years of experience in penetration testing or offensive Cyber operations.

Responsibilities

• Conduct penetration testing and offensive Cyber operations.
• Evaluate systems for security vulnerabilities and recommend improvements.

Skills

Penetration Testing

Cybersecurity

Metasploit

NMAP

Kali Linux

Cobalt Strike

Python

C++

Java

Rust

Assembly

C#

Active Directory

Linux

Windows

MAC OS

Education

Bachelor of Science in Information Systems

Bachelor of Science in Information Technology

Bachelor of Science in Computer Science

Bachelor of Science in Computer Engineering

Tools

Metasploit

NMAP

Kali Linux

Cobalt Strike

Job description

Red Team Penetration Tester III with Security Clearance

Description: The Naval Surface Warfare Center Dahlgren Division (NSWCDD) Dam Neck Activity's (DNA) work is focused on providing engineering, acquisition, logistical, and Cybersecurity (CS) support to the Navy, Marine Corps, Special Warfare Coalition, and Joint Forces for programs including but not limited to Common Total Ship Computing Environment (TSCE), Atlanta Weapon System (AtWS), NAVSEA Red Team, National Cyber Range Complex (NCRC), surface and sub training systems, and Risk Management Framework (RMF) Support for Explosive Ordinance Disposal (EOD). With the growing number of breaches of tactical and non–tactical computer systems, there is an increasing need to focus on the engineering aspects of CS. CS continues to be approached as compliance–based and this has not addressed significant shortcomings and vulnerabilities in the security of naval warfare systems and other service warfare systems. CS requirements must be included during the design, development, and sustainment phases of systems acquisition to ensure they are secure and Cyber–resilient throughout their Life–Cycle. Additionally, previously designed, and fielded systems must be evaluated on an engineering basis to determine potential changes to their design or supportability approaches. Each have a requirement for CS engineering services that includes requirements for: analysis, secure design, Test and Evaluation (T&E), systems analysis and assessment, and Life–Cycle management.

FILLING THIS POSITION IS CONTINGENT UPON AWARD

Requirements

1. Bachelor of Science in Information Systems, Information Technology, Computer Science, or Computer Engineering
2. National Security Agency (NAC) Computer Network Operations Development Program (CNODP) Graduate
3. Minimum IAT Level I
4. Must have prior Red Team experience
5. Must have CSSP Auditor certification
6. Must currently possess a DoD Top Secret clearance
7. Must possess one of the following certifications: Offensive Security Certified Professional (OSCP), Offensive Security Certified Expert (OSCE), Offensive Security Exploitation Expert (OSEE), or Offensive Security Wireless Professional (OSWP)
8. Seven (7) years of full–time professional experience conducting penetration testing or offensive Cyber operations in areas such as:
1. Developing and utilizing penetration tools (Metasploit, NMAP, Kali Linux, Cobalt Strike)
2. Mimicking threat behavior
3. Utilizing various operating systems (Linux, Windows, MAC OS)
4. Utilizing Active Directory
5. Performing exploit development
6. Identifying gaps in tools and development techniques
7. Performing development with at least two scripting or programming languages (Python, C++, Java, Rust, Assembly, C#, etc.)

Desired Skills

1. Advanced Cyber Networking Certifications such as:
1. Cisco Certified Network Professional (CCNP) certification
2. CCIE (Cisco Certified Internetwork Expert)
3. CISSP (Certified Information Systems Security Professional)

Clearance Information

SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS A U.S. GOVERNMENT SECURITY CLEARANCE AT THE TOP SECRET / SCI LEVEL

Travel Requirements

50–75% CONUS and OCONUS travel may be required

About Us

Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients. SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals starting at 10 days of vacation and 5 days of sick leave annually, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence.

Diversity & Inclusion

We strongly believe in the abundance of differences among individuals. We value different points of view and appreciate diverse perspectives. We truly believe this is what makes our organization inclusive and more responsive to the needs of our diverse customers.

EEO

Scientific Research Corporation is an equal opportunity and affirmative action employer that does not discriminate in employment. All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, or national origin, disability or protected veteran status.