USCC JQR qualified personnel with proven offensive cyber operations experience or equivalent contract/civilian work.
Bachelor's degree in Computer Science, Cybersecurity, or related field with 5+ years in exploit/CNO tool development; or Master's degree with 3+ years; or 4+ additional years of directly related experience in lieu of degree.
Proficiency in programming languages such as .NET, Python, C/C++, and/or ASM.
Ability to analyze proof-of-concept exploits and engineer them to be stable and testable.
Technical knowledge of Linux or Windows operating systems.
Capability to generate accurate documentation for developers and testers.
Responsibilities
Rapidly prototype advanced offensive cyber capabilities with senior engineers to meet mission needs.
Embed with the mission team on-site, collaborating daily with subject matter experts in C and Windows internals.
Work with the vulnerability research team to gather information on proof-of-concept exploits and engage with customers to ensure operational needs are met.
Contribute to a culture of technical excellence by mentoring teammates and conducting design/code reviews.
Apply offensive cyber domain expertise to develop and deliver mission-critical solutions.
Benefits
Opportunity to work on critical national security missions.
Collaborative environment with best-in-industry cyber professionals.
Focus on continuous learning and skill enhancement.
Engagement in cutting-edge offensive cyber operations.
Embedded position allows for direct impact on mission outcomes.
Full Job Description
You'll be a critical member of a small team, responsible for bringing your high-level offensive cyber expertise and rapid prototyping capability to bear on a critical national security mission. Join our team of best-in-industry cyber warriors who provide superior service in support of national defense objectives.
What You'll Be Doing:
Rapidly prototyping advanced offensive cyber capabilities with other senior engineers to meet complex and evolving mission needs.
Embedding with the mission team on-site, working daily with subject matter experts in C, Windows internals, and related low-level disciplines.
Collaborating with the vulnerability research team to gather relevant information on proof-of-concept exploits and engaging with the customer to ensure products meet operational needs.
Contributing to a culture of technical excellence by sharing knowledge, mentoring teammates, conducting design/code reviews, and continually sharpening your own skills in programming, Windows internals, Linux internals, and low-level engineering.
Applying offensive cyber domain expertise, including red/purple team operations, to develop and deliver mission-critical solutions.
What Required Qualifications You'll Bring:
USCC JQR qualified (Joint Qualification Record) personnel with proven experience in offensive cyber operations or equivalent contract/civilian work
Bachelor's degree in related field (Computer Science, Cybersecurity, etc.) and 5+ years of experience in exploit/CNO tool development, with preference for offensive domain/red/purple team operators; Master's degree in related field and 3+ years of exploit/CNO tool development experience; 4+ additional years of directly related exploit/CNO tool development experience may be considered in lieu of degree
Proficiency with programming languages such as .NET, Python, C/C++, and/or ASM
Ability to analyze proof-of-concept exploit/CVE vulnerability and engineer it to be stable and testable
Technical Operating System Knowledge with Linux or Windows
Ability to generate accurate documentation for developers and testers
What Desired Qualifications You'll Bring:
Minimum 6-8 years of experience in exploit/CNO tool development
Experience with rapid prototyping and automation tooling for advancing rapid outcomes
Networking protocol/testing expertise
Certified/trained in one or more of the following: Corelan Bootcamp/Advanced, ManTech ACTP Windows/Linux/VR&E, OSCP, OSED, OSWE, BCI Training, USCC CCD Developer (Senior)
Experience with Ghidra, GDB, WinDebug, or Fuzzing
Prior experience in offensive cyber operations, red/purple team activities, or equivalent work from a contract/civilian position
Location: Fort Meade/Columbia MD (On-Customer Site/Embedded)
NOTE: This position requires USCC JQR qualified personnel with proven offensive domain experience. Preference will be given to candidates with red/purple team backgrounds and rapid prototyping skills over traditional software development experience. Defensive-only or network operations center experience will not be considered sufficient for this role.
