Jr. Offensive Cyber Engineer

The Jr. Offensive Cyber Engineer needs to have hands-on experience in penetration testing and/or detection engineering to join our team in Lawton, OK. In this role, you will perform technical security assessments, execute penetration tests on enterprise and government systems, and collaborate with defensive security teams (CEMA Resiliency System [CRS]) to translate offensive tactics into robust threat detections.

Primary Responsibilities:

• Develop custom exploits, payloads, and automated scripts based on identified system vulnerabilities.
• Conduct vulnerability assessments and assist in penetration tests across network protocols, web applications, and cloud environments.
• Collaborate with CEMA Resiliency System (CRS) and detection engineering teams to validate, test, and improve threat detectors based on offensive tactics, techniques, and procedures (TTPs).
• Participate in operational testing events to verify exploit effectiveness in realistic, mission-critical environments.
• Research technical system documentation, architecture diagrams, and security classification guides.
• Document findings clearly and author comprehensive technical reports, remediation guidance, and after-action reviews for technical and project stakeholders.

Basic Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline with 2+ years of relevant experience; OR a Master’s degree with 0+ years of experience; OR an additional 4 years of related experience in lieu of a degree (6+ years total).
• 2+ years of hands-on technical experience in penetration testing, vulnerability assessments, or red teaming.
• Working proficiency with Linux distributions (e.g., Kali, Parrot, Ubuntu) and Windows operating systems.
• Demonstrated ability to write scripts/tools in languages such as Python, Bash, or PowerShell.
• Solid understanding of core networking protocols (TCP/IP), network architecture, and common vulnerability classes.
• Must be a US Citizen with the ability to obtain and maintain an active Top Secret / Sensitive Compartmented Information (TS/SCI) security clearance.
• Willingness to work on-site in Lawton, OK (or relocate prior to start date) and travel to testing events as required.

Preferred Qualifications:

• Certifications: Industry-recognized certifications such as OSCP, GPEN, GWAPT, CPTS, PNPT, CEH, CompTIA PenTest+, or GSEC.
• Testing Tooling: Experience using standard assessment and exploitation tools (e.g., Burp Suite, Metasploit, Nmap, OWASP ZAP, Cobalt Strike).
• Cloud & Modern Tech: Hands-on exposure to evaluating cloud environments (AWS, Azure, GCP) and cloud assessment tools (e.g., ScoutSuite, Pacu, Prowler).
• Defensive Alignment: Familiarity with MITRE ATT&CK, threat detection engineering, SIEM/EDR rule development, or SOC operations.
• Low-Level Knowledge: Coursework or practical experience in reverse engineering, assembly, or binary analysis.
• Defense / Government Experience: Prior experience supporting DoD or government systems and working with classified data handling procedures.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.