Sr. Offensive Cyber Engineer

Leidos; Lawton (OK); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Paid Time Off

11 paid Holidays

401(k) with company match

Flexible schedules

Technical upskilling

Job summary

Leidos seeks a Sr. Offensive Cyber Engineer in Lawton, OK to perform advanced penetration testing and contribute to detection engineering efforts. You will develop exploits, automate tools, and assess enterprise and government systems, including classified environments, while collaborating with defensive teams.

You will lead offensive testing, translate findings into resilient detections, and travel to events to verify exploit effectiveness. US Citizenship and TS/SCI eligibility required.

Qualifications

• Bachelor’s or higher in a technical field with 8+ years of hands‑on pentesting/red teaming experience.
• Proficient in Linux (Kali/Parrot) and Windows at admin level; strong scripting (Python/Bash/PowerShell).
• Knowledge of networking, TCP/IP, and security protocols; US citizenship with TS/SCI eligibility.

Responsibilities

• Develop and execute end-to-end penetration tests across enterprise, government, and classified environments.
• Lead site technical activities and coordinate with CRS/CRS teams to improve threat detectors.
• Research system docs; act as SME on security classification guides and detection capabilities.
• Prepare comprehensive findings and remediation recommendations for technical and executive audiences.
• Travel to testing events and assist with planning future assessments to strengthen security posture.

Skills

Penetration testing

Red teaming

Offensive security operations

Python scripting

Bash scripting

PowerShell

Networking fundamentals

US Citizenship

Security clearance TS/SCI

Education

Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or related discipline

Master's degree with 6+ years experience

Additional 4 years of related experience in lieu of a degree

Tools

Kali Linux

Parrot OS

AWS

Azure

GCP

ScoutSuite

Pacu

Prowler

OSCP

GPEN

GWAPT

CPTS

GXPN

Job description

Leidos has a new and exciting opportunity for a Sr. Offensive Cyber Engineer in our INTEL Sector's Cyber & Analytics Business Area (CABA) . Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. At Leidos , we offer competitive benefits , including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in National Security!

We are seeking an experienced Sr. Offensive Cyber Engineer (Penetration Tester) with detection engineering capabilities to conduct comprehensive security assessments on enterprise and government systems. In this role, you will perform offensive testing while collaborating closely with defensive security teams (CEMA Resiliency System [CRS]) to translate attack findings into resilient threat detection capabilities.

This is a full-time position with the Leidos office in Lawton, OK. The position consists of developing custom exploits and automation tools based on identified vulnerabilities and collaborating with detection engineering teams to translate offensive security findings into defensive capabilities. This includes traveling to testing events to verify exploit effectiveness in operational environments and coordinating with Cyber Response System (CRS) teams to develop and validate threat detectors. The position is responsible for researching and analyzing technical documentation on assigned systems, serving as a subject matter expert on system classification guides and detection capabilities, and ensuring timely delivery of technical findings, recommendations, and after-action reports to both offensive and defensive security stakeholders. The position also includes serving as the sites technical lead, performing comprehensive penetration tests and vulnerability assessments on enterprise and government systems, including classified environments, while conducting deep-dive analysis of network protocols, cloud infrastructure, and web applications. At higher technical levels, this includes planning and identifying future testing events and opportunities to enhance organizational security posture.

Primary Responsibilities:

• Develop custom exploits, payloads, and automation tools tailored to identified system vulnerabilities.
• Serve as the site technical lead, executing end-to-end penetration tests and vulnerability assessments across enterprise, government, and classified environments.
• Perform deep-dive analysis across network protocols, cloud infrastructure (AWS/Azure/GCP), and web applications.
• Collaborate with detection engineering and CEMA Resiliency System (CRS) teams to validate, test, and improve threat detectors based on offensive tactics, techniques, and procedures (TTPs).
• Travel to operational testing events to verify exploit effectiveness in real-world scenarios.
• Research technical system documentation and serve as a Subject Matter Expert (SME) on system security classification guides and detection capabilities.
• Author and present comprehensive technical findings, remediation recommendations, and after-action reports for both technical staff and executive stakeholders.
• Support long-term operational planning by identifying future test opportunities to strengthen organizational security posture.

Basic Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline with 8+ years of relevant experience; OR a Master's degree with 6+ years of experience; OR an additional 4 years of related experience in lieu of a degree (12+ years total).
• 8+ years of dedicated hands-on experience in penetration testing, red teaming, or offensive security operations.
• Proficiency with Linux distributions (e.g., Kali, Parrot) and Windows operating systems at an administrative/deep-system level.
• Demonstrated scripting and development capability using languages such as Python, Bash, or PowerShell for tool automation and exploit modification.
• Strong understanding of networking concepts, TCP/IP architecture, and security protocols.
• Must be a US Citizen and be able to obtain and maintain an active Top Secret / Sensitive Compartmented Information (TS/SCI) security clearance.
• Willingness to work on-site in Lawton, OK (or relocate prior to start date) and travel to testing events as required.

Preferred Technical Qualifications:

• Offensive Security Certifications: OSCP, GPEN, GWAPT, CPTS, or GXPN
• Defense & Detection: Experience in Detection Engineering, SOC operations, threat hunting, or utilizing frameworks like MITRE ATT&CK.
• Cloud & Modern Tech: Experience evaluating cloud environments (AWS, Azure, GCP) using assessment tools (e.g., ScoutSuite, Pacu, Prowler).
• Reverse En