OVERVIEW:
Recent professional experience within the last 12 months related to conducting computer network operations, software development at both the user and kernel level, vulnerability research and development, as well as applied knowledge related to building, configuring and managing covert and virtualized systems, networking environments, and data ingest management to support cyber operations is required.
GENERAL DUTIES:
- Mixed vendor/platform environments, including COTS, GOTS and custom developed tools and capabilities
- Configuration and management of routing and switching fabrics with significant segmentation for projects and lines of effort, including managed attribution of individual network paths
- Firewall, VPN and tunnel management and configuration
- Administration of high availability VMWare vSphere/vCenter environments with complex networking configurations
- Administration of Windows and Linux environments
- Scripting automated provisioning of hosts and firewall/network appliances (e.g. terraform, openstack, ansible, docker, kubernetes, etc.)
- Cloud environments (e.g. AWS, Azure, GCP, etc)
- Software engineering using modem programming languages (e.g. C, .NET, and Python)
- Experience with RESTful API development and administration
- Rapid software prototyping using novel analysis techniques
- Using CVCD pipelines and git version control systems
- Vulnerability research against hot endpoints and service targets
- Delivery of an end-to-end remote exploit chain, including initial access, establishing footholds, implant delivery, privilege escalation, EDR evasion, lateral movement, and data collection and exfiltration
- Advanced endpoint detection and response applications
- Software testing and validation including application of risk assessment methodologies
- Digital forensics and software reverse engineering
- Desired contribution to capture the flag exercise, bug bounty programs, and speaker engagements as security conferences
REQUIRED QUALIFICATIONS:
- Bachelor’s Degree in Computer Science, Engineering or related scientific/technical field with five (5) years of experience in the areas defined below; or Master’s Degree in Computer Science or related scientific/technical field with three (3) years experience in the areas defined below:
- Certifications: CCNE, GIAC GXPN, OSC, or similar
- Experience: Contractor shall have specific knowledge in the below functional areas:
- Software engineering
- Network design and analysis, including managed attribution networks – Command and Control Channels and Data Egress
- Configuring and managing networking environments
- Implant Delivery and Initial Access Vectors
- Detection Avoidance
- Cyber Effects and Solutions
- Reverse engineering and vulnerability analysis of malware and other software
- Risk Assessment of individual exploit chain components
- Administrative Management and Support
- Vulnerable Code Acquisition
CLEARANCE:
