Cyber Exploiter​/Vulnerability Assessment Engineer; TS​/SCI Poly

Senior Level:

GCI embodies excellence, integrity and professionalism. The employees supporting our customers deliver unique, high-value mission solutions while effectively leverage the technological expertise of our valued workforce to meet critical mission requirements in the areas of Data Analytics and Software Development, Engineering, Targeting and Analysis, Operations, Training, and Cyber Operations. We maximize opportunities for success by building and maintaining trusted and reliable partnerships with our customers and industry.

At GCI, we solve the hard problems. As a Cyber Exploiter, a typical day will include the following duties:

A qualified Cyber Exploiter reviews, manipulates, triages, and analyzes large datasets. Candidate is responsible for supporting operational and analytical requirements. Activities include detailed log analysis, network traffic monitoring, and vulnerability risk assessment. The individual will be expected to conduct assessments of network, software tools and systems to identify vulnerabilities, and work with internal and external technical stakeholders to identify solutions to enrich analysis.

Able to follow the entire targeting life cycle by engaging in data exploitation of requirements collection, data analysis, summary and documentation, and actionable information dissemination. Able to identify, triage and exploit data collections.

• Execute complex assessments on enterprise networks, applications, databases, virtualization platforms, cloud environments, ICs, and emerging technologies
• Develop custom assessment scripts and automation tooling
• Lead testing in areas such as privilege escalation, SQLi, RCE, XSS, misconfiguration analysis, wireless, and cloud security
• Transform raw scan data into actionable findings and remediation recommendations

• Conduct technical assessments across diverse IT assets
• Perform tool-based scanning using Nessus, Retina, Red Seal, HBSS, and manual testing methods
• Produce draft findings and support senior engineers in deeper exploitation
• Participate in pre-assessment coordination, data collection, and artifact generation

• Support data collection, artifact management, documentation, and configuration reviews
• Assist senior staff with testing, findings spreadsheet development, and reporting
• Maintain VA toolkits and prepare systems for assessment events

• Design and integrate GOTS, COTS, FOSS VA tools
• Maintain Mobile Packet Capture Toolkit (MPT)
• Develop new assessment scripts using Python, Perl, Ruby, and .NET
• Enhance assessment repeatability and automation
• Software engineering background
• GIAC GREM, OSWE, or developer certifications preferred

Work alongside other team members to sustain and advance our organization’s capabilities.

Bachelor's degree in Computer Science, Information Technology, or other related discipline, or equivalent combination of education, technical certifications, training, and work/military experience.

• Demonstrated experience with relationship management and communication.
• Demonstrated experience with issue management, knowledge management, and the ability to stay informed and up to date on the latest vulnerability assessment issues, tools, and case technological advancements.
• Demonstrated experience with developing assessment/case reports, to include recommendations
• Demonstrates experience or knowledge of cyber forensics operations
• Demonstrated experience in building briefings and reports that convey information to a technical and non-technical audience.
• Demonstrated experience with planning and hosting technical exchange meetings as well as meetings with staff leadership.
• Demonstrated experience conducting security assessments of…