Security Software Engineer – Red Team Penetration Tester

RPI Group Inc; Dahlgren (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

RPI Group, Inc. is seeking a Security Software Engineer to support Red Team penetration testing for a Navy customer in Dahlgren, VA. If you are energized by complex technical challenges and enjoy identifying security weaknesses that inform real-world defensive decisions, this role is for you.

The ideal candidate has five years of Linux and Windows experience, hands-on use of Kali, Metasploit, NMAP and Cobalt Strike, strong scripting in Python/C/C++, and relevant DoD-ready certifications. U.S.

Qualifications

• Five years of Linux experience with COMPTIA Linux+ or equivalent.
• Five years of Windows experience with enterprise networks and MCSA training.
• Proficient in common pentest tools: Kali, Metasploit, NMAP, Cobalt Strike.
• Experience in Penetration Testing/Red Team or related development work.
• Programming knowledge: Python, C/C++, Go, or similar.
• Experience with AWS, REST/SOAP web services, and web app testing.

Responsibilities

• Conduct red team penetration testing for a Navy customer.
• Analyze security weaknesses and recommend defense improvements.
• Collaborate with cross-functional teams to remediate findings.
• Maintain and document testing methodologies and results.

Skills

Linux

Windows

Kali

Metasploit

NMAP

Cobalt Strike

Python

C

C++

PowerShell

Red Team

Education

CompTIA Linux+

FedVTE Linux+

MCSA

Tools

NSX

vCenter

vRealize Suite

Horizon View

Palo Alto

Cisco

VMware

NetApp

AD/Entra ID

Job description

Position Title: Security Software Engineer – Red Team Penetration Testers

Salary Range: $110,000 to $150,000 Annually

Location: Dahlgren, VA

About the Role

RPI Group is seeking a skilled, driven Security Software Engineer to support Red Team penetration testing for a mission-focused Navy customer. If you are energized by complex technical challenges, enjoy finding and analyzing security weaknesses, and want your work to inform real-world defensive decisions, this role is for you.

What We’re Looking For

• Five (5) Years experience in:
  • Linux – firm grasp/demonstrated knowledge
  • Associated Training: COMPTIA Linux+ or FedVTE Linux+
• Five (5) Years experience in:
  • Windows – foundational knowledge with good understanding of enterprise networks
  • Associated Training: Microsoft course (MCSA; Various)
• Strong working knowledge of common Penetration Testing (PENTEST) tools:
  • Kali, Metasploit, NMAP, Cobalt Strike
  • Associated Training: Certified Ethical Hacker or Offensive Security Certified Professional and;
• Documented experience in at least one of the following:
  • Penetration Testing (PENTEST) (government or contractor)
  • Red Team Operations (government or contractor)
  • Tool/Software Development (exploits/malware, C2, reverse engineering, bug bounties)
  • Python, C, C#, C++, Go, Perl, Powershell
• Web Dev/Web App Dev/Web Penetration testing
  • NSX, vCenter, vRealize Suite, Horizon View (VDI) and others
  • PAN-OS
  • FirePower, Nexus, IOS, ASA
  • ONTAP, SnapMirror
  • Active-Directory
  • Entra ID (Azure AD), Active Directory, SSO, MFA, Azure application integration, Identity Federation.
  • Automation using Powershell, PowerAutomate, Logic Apps, Graph API.
  • Microsoft Entra ID and Microsoft 365 in a hybrid environment.
  • Experience with Palo Alto, Cisco, VMWare, NetApp and Microsoft products.
  • Extending or integrating on premises AD with Entra ID.
  • Managing identity and access in Microsoft Entra ID.
  • Experience conducting Red Team operations in an MDE environment.
  • Experience with AWS, Cloud Audit, Serverless and Microservice Architecture
  • Experience working with AWS services (such as EC2, S3, KMS, RDS) and security best practices relevant to those services
  • Experience with Web Services penetration testing (RESTful and SOAP) Web Authentication protocols (e.g. OAuth2, SAML, LDAP)
  • PHP, ASP, SQL db's, Java, HTML, No SQL
• Minimum certification as IAT Level II per DoD 8570.01, or successor.
• Minimum certification as penetration tester and possess one of the following certificates:
  • Offensive Security Certs: Offensive Security Certified Professional (OSCP), Offensive Security Certified Expert (OSCE), Offensive Security Exploitation Expert (OSEE), Offensive Security Wireless Professional (OSWP)
  • SANS Certs: SEC560 - Network Penetration testing and Ethical Hacking (GPEN Certification), SEC542 - Web App Penetration Testing and Ethical Hacking (GWAPT Certification), SEC660 - Advance Penetration Testing. Exploit Writing, AND Ethical Hacking (GXPN Certification), SEC642 - Advanced Web App Penetration Testing and Ethical Hacking, SEC564 -
  • Red Team Operations and Threat Emulation
  • OSD Sponsored Cyber Operation Academy (COAC) graduates.
  • Capture the Flag (CTF) participation (DEFCON, Over-The-Wire (OTW), Hack the Box, USS Secure CTF's)
  • Security research resulting in a Common Vulnerabilities and Exposures (CVE)
• Possess the ability to:
  • Debug and reverse engineer software.
  • Analyze Windows Events and Linux syslog's, boot logs and dmesg logs.
  • Program and debug Web 2.0, Java, Perl, Ada, C, C+, C++, Tool Command Language (tcl/ tk) scripts and graphical user interfaces (GUIs) using Microsoft Visual tele and Rational ClearCase for software configuration management.
  • Program and debug Web 2.0, Java, Perl, Ada, C, C+, C++, Tool Command Language (tcl/ tk) scripts and graphical user interfaces (GUIs) using Microsoft Visual tele and Rational ClearCase for software configuration management.
  • Recommend software modifications to systems to mitigate known vulnerabilities. Operate and administrate computer systems running HP-UX, UNIX, Solaris, Linux and Microsoft Windows.
  • Identify security flaws in compiled and human readable source code. Understand code utilizing real-time VxWorks and Lynx OS operating systems, Common Object Resource Broker Architecture (CORBA), firewalls and networking protocols.
  • Understand how to implement NSA approved encryption technologies and devices. Apply DISA Security Technical Implementation Guides (STIGs).
  • Apply virtual hosting and server technology in system architectures. Understand and apply the concept of deceptive technology such as honey pots in system architectures.
  • Participate in Code Reviews. Perform Static Source Code Analysis. Author recommendations for improving software and code design.
  • Contribute to a System Security Administrator and Operators Manual (SSAOM)

Must be a U.S. Citizen and Possess an Active Security Clearance

RPI Group, Inc. is an Equal Opportunity Employer, including individuals with disabilities and protected veterans.