Cyber Test Exploitation Lead

We are currently seeking a Penetration Test Lead to join our Cyber Support Operations division. This role involves spearheading red team activities for executing cyber test and training exercises at the National Cyber Range Complex Eglin site. The chosen candidate will hold the responsibility for ensuring the overall excellence of the cyber security evaluation team’s execution of events.

Responsibilities:

• Lead individual cyber security teams through evaluations and OPFOR campaigns for test, training events, and mission-based cyber risk assessments:
  • Lead a small red team, overseeing day-to-day coordination and tasking.
  • Conduct hands-on penetration testing during individual test events alongside the team.
  • Act as the owner and author of test reporting artifacts and deliveries carried out by the red team.
• Assume a supervisory role encompassing all Cyber Security Evaluation Teams acting in an OPFOR capacity for site-based test and training events:
  • Maintain and enhance standards and best practices for the red teams.
  • Ensure quality control measures are adhered to for test execution and the production of delivery artifacts by the Cyber Security Evaluation Teams on-site.
  • Identify, schedule, and coordinate red teams for events based on availability, domain expertise, and event-specific parameters.
  • Act as a liaison between event execution leadership, government leadership, and government counterparts to comprehend event requirements for individual test execution.

Basic Qualifications:

• Hold a Bachelor’s degree from an accredited college in a relevant discipline, or equivalent experience/combined education, along with 7 years of related engineering experience.
• Active TS/SCI Clearance.
• Proficiency in penetration testing.
• Proven leadership experience managing multiple small teams with remote team members.
• Strong technical writing skills.
• Experience in at least one of the following areas:
  • Penetration Testing of modern Windows and Linux operating systems and IP-based networks.
  • Developing exploits and malware targeting modern operating systems and defenses.
  • Reverse Engineering.
  • Penetration Testing of Web Applications.
  • Hardware hacking.
  • Software Defined Networks.
  • Digital Forensics.

Desired Expertise:

• Experience in conducting mission-based cyber risk assessments.
• Possession of Offensive Security Certified Engineer (OSCE) certification.
• Possession of Offensive Security Certified Professional (OSCP) certification.
• Possession of GIAC Certified Exploit Researcher and Advanced Penetration Testers (GXPN) certification.

Note: The responsibilities and qualifications listed above represent the key requirements of the position; they are not exhaustive.

Security Clearance Statement: Applicants must hold a government security clearance; US Citizenship is mandatory. Clearance Level: TS/SCI

Additional Information:

• Work will be conducted onsite at Eglin AFB.
• A variety of alternate work schedules are supported