Penetration Tester - Madison, United States - Leidos

Description

Description

Leidos Defense Systems is seeking a full-time Penetration Tester - Security Engineer to perform penetration tests on customer systems in the defense, space, cyber, and commercial fields. The ideal candidate will possess strong technical skills, including proficiency in networking, operating systems, and programming, as well as the ability to think creatively and strategically to anticipate potential threats. They will also possess the ability to analyze both open and closed-source intelligence to determine potential cyber threat Tactics, Techniques, and Procedures (TTPS), attack vectors, and risks to systems of various size and complexity.

Primary Responsibilities

• Penetration testing customers systems and networks.
• Deep-dive preparatory analysis for systems under test.
• Penetration testing at multiple stages of the system development/acquisition lifecycle.
• Developing and recommending detailed cyber threat mitigation strategies for customer systems and networks.
• Exploiting vulnerabilities and misconfigurations within operating systems, protocols, and networks.
• Researching and developing various cyber threat actor Tactics, Techniques, and Procedures (TTPs).
• Offensive tool development for use in stand-alone and network-connected systems.
• Timely delivery of development updates and after-action reports.
• Create detailed reports outlining vulnerabilities, risks, and remediation strategies.
• Maintaining a comprehensive understanding of the cyber threat landscape, situational awareness of emerging threats, zero days, vulnerabilities and other threats against customer systems, networks, and assets including identifying and analyzing cyber threats actors and/or activities.

Qualifications:

• Bachelor's degree in Cyber Security, Computer Science, Computer Engineering, Electrical Engineering, or related Technical Degree.
• Four years of experience in penetration testing/red teams or related security field, or a Master's degree in a related field with + two years of experience.
• Proficient with Linux (preferably Kali, Parrot, or similar distros) and Windows Operating systems
• Experience with using scripting languages such as bash, python, etc.
• Strong background in computer security, administration, forensics, systems analysis, etc.
• Exceptional problem solving skills.

Candidate must be a resident of North Alabama area or be willing to relocate to the Huntsville/North Alabama area.

Desired Skills:

• Hands-on experience with performing penetration tests, reverse engineering, and/or system analysis
• Active clearance is highly preferred
• Prior DoD experience.
• Strong communication skills and documenting and relaying findings to customers.
• Strong understanding of TCP/IP network architecture.
• Experience with developing exploits using scripting languages such as bash, python, etc.
• Extensive experience with scanning/analysis tools (nmap, burpsuite, nikto, etc.)
• Extensive experience with exploitation tools (Metasploit, Cobalt Strike, etc.)
• Extensive Knowledge of the MITRE ATT&CK and D3FEND Frameworks.
• Completion or work towards GSEC, GCIH, GPEN, OSCP, or similar technical certification

Security Requirements:

Candidate must be a US Citizen and possess (and be able to maintain) a Final Top Secret/SSBI Clearance or meet the eligibility to obtain (and maintain) a Final Top Secret Clearance.

Original Posting Date:

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.