Senior Cyber Engineer

Overview

Draper is an independent, nonprofit research and development company headquartered in Cambridge, MA. The 2,000+ employees of Draper tackle important national challenges with a promise of delivering successful and usable solutions. From military defense and space exploration to biomedical engineering, lives often depend on the solutions we provide. Our multidisciplinary teams of engineers and scientists work in a collaborative environment that inspires the cross-fertilization of ideas necessary for true innovation.

For more information about Draper, visit

An Offensive Cybersecurity Engineer (SMTS) leverages an understanding of hardware, firmware/software, and existing or custom tooling to evaluate systems for vulnerabilities and/or to develop software to exploit and alter the behavior of a system. Offensive Security Engineers are responsible for both identifying and defeating modern defensive security techniques in both hardware and software to deliver software that can withstand environmental scrutiny.

Works independently, in conjunction with defensive software or hardware cybersecurity professionals for red team efforts, or with other cross-domain professionals for targets that intersect other technical areas.

Offensive Cybersecurity Engineer (SMTS) engaging in hardware and software assessment, software development, tool creation, documentation, solution driving, risk mitigation, mentoring, and related duties.

• Assess hardware and software for security vulnerabilities using a breadth of technologies and techniques.
• Develop software that meets behavior and security requirements for tailored applications.
• Integrate software capabilities with other tasks or groups to improve performance or behavior requirements.
• Create new tools and systems to detect and exploit vulnerabilities and system weaknesses.
• Document nominal application and system functionality, in addition to implemented changes.
• Drive solutions to complex problems with limited direction—contribute to requirements development, propose ways forward, and adapt appropriately to changes in requirements.
• Provide insight and suggest design modifications based on analysis outcomes, and apply analysis techniques across a range of technical disciplines.
• Identify program/system-level technical risks and develop and execute mitigation strategies.
• Mentor less experienced engineers and provide thoughtful, constructive feedback.
• Perform other related duties as assigned.

• Curiosity-driven approach to solving complex, customer-driven problems as part of a multi-disciplinary team.
• Collaborate and communicate effectively and openly with multi-disciplinary program team members, program leadership, and non-technical personnel.
• Be a team player able to work in a fast-paced environment with the ability to balance multiple competing tasks and demands.

Requires a bachelor's in computer science, computer engineering, or related field.

5-10 years experience in Cybersecurity or related field is required.

• 8+ years experience in offensive security positions primarily focused in red teaming roles within the national security context.
• Understanding of network protocols and computer architecture.>
• Written and verbal communications skills.
• Knowledge of threat modeling, threat intelligence, maybe incident response.
• Scripting experience.
• Understanding of Dev Ops, CI/CD.
• Experience working with systems engineers.
• Understanding of basic cryptography.
• Leadership demonstrated.
• Preferred:
  • Exploit development and assembly code.
  • Fault injection, side channels.
  • Certifications are a plus but not necessary.

Candidates selected for this position will be required to obtain and maintain a government security clearance. Secret Clearance is preferred.

If you don't find the right posting in our Career Opportunities, you may submit your resume for future consideration.

Cambridge

Massachusetts

$82,300.00 - $

Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Union ranges will be in compliance with the collective bargaining agreement's approved rates by location and role.

Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Please note that the compensation details listed in US role postings reflect the base salary only, and does not include bonuses or benefits.

Our work is very important to us, but so is our life outside of work. Draper supports many programs to improve work-life balance including workplace…