Senior Threat Emulation Penetration Tester

Socket.dev; Springfield (VA); Hybrid; USD 140,000 - 175,000; Full time

Job summary

Agile Defense, based in the United States, seeks a Senior Cyber Threat Emulation SME to support a federal Agency from its hybrid Springfield, VA location. The role covers full-spectrum offensive security operations within a purple team, from initial infection vectors to final reports.

The candidate will develop targeted exploits, write scripts, analyze threat data, and brief leadership on findings, risk, and recommended mitigations. Top Secret/SCI eligibility and OSCP/GPEN are required.

Qualifications

• 7+ years in cyber offensive ops, red team work, and/or Penetration Testing.
• Active Top Secret Clearance and SCI Eligibility.
• Strong analytical and technical skills in computer network defense operations.
• Ability to develop rules, filters, views, signatures, countermeasures and scripts.

Responsibilities

• Research and stay up to date with emerging threats and Threat Emulation methodologies.
• Develop and write customized scripts (Python, PowerShell or other) to simulate attacker behavior.
• Provide reporting for threat emulation successes and brief leadership.
• Review collected monitoring and defense information for anomalies to support threat simulation.
• Engage with Agency offices to access information sources for Threat Emulation activities.

Skills

Threat Emulation

Red Team

Penetration Testing

Threat Detection

Python

PowerShell

OSCP/GPEN

Education

High School Diploma or equivalent

Bachelor’s Degree not required but preferred

Tools

Python

PowerShell

SIEM/Splunk

Job description

Agile Defense, based in the United States, seeks a Senior Cyber Threat Emulation SME to support a federal Agency from its hybrid Springfield, VA location. The role covers full-spectrum offensive security operations within a purple team, from initial infection vectors to final reports.

The candidate will develop targeted exploits, write scripts, analyze threat data, and brief leadership on findings, risk, and recommended mitigations. Top Secret/SCI eligibility and OSCP/GPEN are required.