Senior Cyber Security Engineer​/CSET Team

senior cyber security engineer / cset team

• location: us-md-patuxent river
• :
• category: network engineering
• position type: regular full-time
• application open date: 7/28/2025

estimated starting salary range: usd $/yr.

- usd $/yr. Salary to be determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, and alignment with market data.

• performing as a member of cyber security evaluation team (cset) providing guidance and subject matter expertise to government personnel
• supporting offensive security/red team/adversarial emulation testing
• executing red team engagements in a variety of networks using real-world adversarial tactics, techniques, and procedures (ttps) from conception to report delivery
• developing comprehensive security testing strategies and programs to provide assurance that security controls are designed and operating effectively
• working independently but collaborate with cross-functional to provide security engineering consulting and control design recommendations to reduce risk
• conducting open-source intelligence gathering, network vulnerability scanning, exploitation of vulnerable services, lateral movement, install persistence in a target network(s), and manage c2 infrastructure
• systematically analyzing each component of an application with the intent of locating programming flaws that could be leveraged to compromise the software through source code review or reverse engineering
• developing payloads, scripts and tools that weaponize new proof-of-concepts for exploitation, evasion, and lateral movement
• safely utilize attacker tools, tactics, and procedures when in sensitive environments/devices
• evading edr devices such as windows defender and carbon black to avoid detection by defenders/behavioral based alerting in order to further the engagement objectives
• demonstrating expertise in the following: active directory, software development, incident response, or cloud infrastructure
• carefully document and log all exploitation activities
• documenting identified vulnerabilities and researching corrective/remediation actions in order to recommend a risk mitigation technique(s)
• demonstrating new vulnerabilities and assist network defenders (blue team) with the refinement of detection capabilities
• maintaining knowledge of applicable red team policies, standing ground rules, regulations, and compliance documents
• communicating effectively with team members especially during an engagement
• ability to think unconventionally in order to develop adversarial ttps
• keeping current with ttps and the latest offensive security techniques

• bachelor's degree with a focus in computer science, computer information systems, engineering, mathematics, management information systems, cybersecurity, cyber operations, or a related discipline with corresponding experience and demonstrated mastery of relevant computer science topics
• 7+ years of cyber adversarial emulation experience, to include penetration testing of modern windows and linux operating systems, ip-based networks and protocols, 802.11 networks, and/or web applications, hardware hacking, software defined networks/rf
• intermediate knowledge of known advanced persistent threat (apt) actor techniques, tactics, and procedures (ttps), to include familiarity with terminology from mitre att&ck used to describe ttps used in cyber attacks
• intermediate knowledge of techniques and tools used for exploit development of common operating systems, software debugging, and application fuzzing
• intermediate knowledge of tools and techniques used for incident response, reverse engineering, and digital forensics
• superior oral communication skills, including the ability to project confidence and enthusiasm, in the following core areas: formal presentations; soliciting goals and requirements from range users; explaining adversarial emulation in the context of testing and training events; effectively communicating event and environment requirements to cset members; explaining cost estimates based on estimated levels of cset effort; managing expectations as relevant to cset ttps;
  
  and explaining technical nuances and…