SCI with Poly Required)

GCI Incorporated•Chantilly, VA

9d•$142,792 - $238,451

About The Position

GCI is hiring a Cyber Exploiter/Vulnerability Assessment Engineer to support operational and analytical requirements through data review, exploitation, and vulnerability assessment. The role involves reviewing, manipulating, triaging, and analyzing large datasets; conducting detailed log analysis and network traffic monitoring; and assessing vulnerability risk across networks, software tools, and systems. The engineer works with internal and external technical stakeholders to identify solutions that enrich analysis and follows the targeting lifecycle from requirements collection and data analysis through documentation and actionable information dissemination. Responsibilities vary by seniority. Senior-level work includes complex assessments across enterprise networks, applications, databases, virtualization platforms, cloud environments, industrial control systems, and emerging technologies; developing custom scripts and automation; leading testing; and translating scan data into actionable findings and remediation recommendations. Mid-level work includes technical assessments, tool-based scanning and manual testing, drafting findings, supporting deeper exploitation, and participating in assessment coordination and data collection. Junior-level work includes supporting data collection, artifact management, documentation, configuration reviews, testing, reporting, and preparation and maintenance of assessment toolkits. The role also designs and integrates government-off-the-shelf, commercial-off-the-shelf, and free/open-source vulnerability assessment tools; maintains a Mobile Packet Capture Toolkit or similar mobile assessment tools; develops scripts using languages such as Python, Perl, Ruby, and .NET; and improves assessment repeatability and automation. The position collaborates with team members to sustain and advance organizational capabilities. The position requires U.S. citizenship and an active/current TS/SCI with Polygraph clearance. A bachelor's degree in Computer Science, Information Technology, or a related discipline is required, or an equivalent combination of education, technical certifications, training, and work or military experience.

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related discipline, or an equivalent combination of education, technical certifications, training, and work or military experience.
U.S. citizenship.
Active/current TS/SCI with Polygraph clearance.
Demonstrated relationship-management and communication experience.
Experience with issue management and knowledge management, and ability to stay current on vulnerability assessment issues, tools, and technological advancements.
Experience developing assessment or case reports with recommendations, and building briefings and reports for technical and non-technical audiences.
Experience or knowledge of cyber forensics operations.
Experience planning and hosting technical exchange meetings and meetings with staff leadership.
Experience assessing Windows 10/11 desktops and Windows Server 2016/2019/2022 using industry-standard tools.
Experience assessing Linux systems including RHEL, Ubuntu, and CentOS; experience with BSD-based systems such as macOS and FreeBSD is also described.
Experience assessing VMware vSphere and Hyper-V hypervisors; Citrix Virtual Apps & Desktops and VMware Horizon virtual desktop infrastructure; Nutanix and VMware vSAN hyperconverged infrastructure; and Docker and Kubernetes containerized environments.
Experience or knowledge of mainframe security concepts, including z/OS and RACF.
Experience conducting network vulnerability assessments, including device configuration reviews against industry standards, protocol and traffic analysis, network architecture review, and analysis of configurations such as Cisco IOS, Palo Alto, and Juniper.
Experience conducting application vulnerability assessments, including OWASP Top 10 web testing, REST and GraphQL API security, authentication and authorization reviews, and familiarity with Java, Python, .NET, and JavaScript security implications.
Experience assessing traditional middleware and application servers such as WebSphere, WebLogic, and JBoss, as well as APIs, microservices, and message brokers; understanding of legacy SOA and contemporary service-to-service security patterns.
Experience assessing relational databases such as Oracle, SQL Server, MySQL, and PostgreSQL, including configuration, access controls, and encryption.
Experience or familiarity with Wi-Fi security, basic Bluetooth vulnerabilities, and RFID-based access control systems.
Experience or familiarity with ICS and SCADA security, common protocols such as Modbus, DNP3, and OPC, and operational technology security considerations.
Experience assessing AWS infrastructure, IAM, network security, and compliance, including in classified environments.
Experience or familiarity assessing Azure infrastructure, identity and access management, network security, and compliance, including in classified environments.
Experience integrating GOTS, COTS, and FOSS vulnerability assessment tools, including API integration, workflow orchestration, data normalization and correlation, report aggregation, and platforms such as Tenable.sc and Qualys VMDR.
Experience assessing directory, naming, authentication, and authorization systems, including Active Directory, LDAP, Kerberos, SAML, OAuth 2.0, SSO, MFA, RBAC, and ABAC; configuration reviews, privilege escalation analysis, account security, and tools such as BloodHound and PingCastle.
Experience or familiarity assessing SAN technologies, protocols, storage infrastructure, and controls, including Fibre Channel, iSCSI, FCoE, storage arrays, SAN switches, HBAs, zoning, LUN masking, access controls, CHAP, and encryption.
Experience developing or tailoring custom vulnerability assessment solutions using scripting, automated scanning workflows, scheduled assessments, and specialized assessment checks.
Experience developing metrics and tracking remediation progress, assessing business impact, and providing risk-based remediation recommendations.
Experience integrating vulnerability assessment into CI/CD pipelines for DevSecOps.
Experience or familiarity assessing Cross Domain Solutions, including guards, data diodes, secure transfer systems, information-flow policies, data sanitization, content filtering, domain separation, and segmentation; knowledge of ICD 503, CNSS 4009, and CDS accreditation requirements is included.
Experience or familiarity conducting supply-chain risk assessments, including vendor security evaluations, software composition analysis, SBOMs, hardware provenance verification, and supply-chain security frameworks.
Experience or familiarity assessing VoIP and teleconferencing security, including SIP/H.323, IP-PBX systems, video conferencing platforms, and SRTP encryption, authentication, and access controls.
Experience analyzing vulnerability scan data, identifying false positives, prioritizing risk, and correlating data across multiple sources.
Experience sustaining custom vulnerability assessment toolsets, including maintenance, updates, configuration management, and integration; operational experience with MPT or similar mobile assessment tools is required.
General knowledge of AI and machine learning technologies, including model architectures, training and inference, TensorFlow or PyTorch, and AI security risks.
Experience with RMF tool accreditation, security compliance validation, maintaining tools to government security requirements, and supporting tool authorization in classified environments.
Certifications listed: CISSP, OSCP, GPEN, CEH, GREM, Python, Linux+, Network+, and Security+.

Nice To Haves

Software engineering background.
GIAC GREM, OSWE, or developer certifications preferred.
Experience with CDS products such as Owl, Forcepoint, or BAE Systems is preferred.
Experience or familiarity with BSD-based systems, including macOS and FreeBSD.
Experience or familiarity with Wi-Fi security, basic Bluetooth vulnerabilities, and RFID-based access control systems.
Experience or familiarity with ICS and SCADA security concepts.
Experience or familiarity with Azure cloud environments.
Experience or familiarity with SAN technologies and security controls.
Experience or familiarity with Cross Domain Solutions and supply-chain risk management assessments.
Experience or familiarity with VoIP and teleconferencing security.

Responsibilities

Review, manipulate, triage, and analyze large datasets in support of operational and analytical requirements.
Conduct detailed log analysis, monitor network traffic, and assess vulnerability risk.
Assess networks, software tools, and systems to identify vulnerabilities, and collaborate with technical stakeholders on solutions that enrich analysis.
Follow the targeting lifecycle, including requirements collection, data exploitation and analysis, summaries and documentation, and actionable information dissemination.
Identify, triage, and exploit data collections.
At the senior level, execute complex assessments of enterprise networks, applications, databases, virtualization platforms, cloud environments, ICS, and emerging technologies.
Develop custom assessment scripts and automation tooling; lead testing in areas such as privilege escalation, SQL injection, remote code execution, cross-site scripting, misconfiguration analysis, wireless security, and cloud security.
Transform raw scan data into actionable findings and remediation recommendations.
At the mid level, conduct technical assessments across diverse IT assets; perform tool-based scanning and manual testing; draft findings; support senior engineers in deeper exploitation; and participate in pre-assessment coordination, data collection, and artifact generation.
At the junior level, support data collection, artifact management, documentation, and configuration reviews; assist with testing, findings spreadsheets, and reporting; and maintain toolkits and prepare systems for assessment events.
Design and integrate GOTS, COTS, and FOSS vulnerability assessment tools.
Maintain the Mobile Packet Capture Toolkit (MPT) or similar mobile assessment tools.
Develop assessment scripts using Python, Perl, Ruby, .NET, or other appropriate languages, and improve assessment repeatability and automation.
Communicate vulnerability findings through technical reports, executive summaries, briefings, and presentations for technical and non-technical audiences.
Develop metrics and track remediation progress; analyze scan results, false positives, risk prioritization, and findings across multiple sources.
Support CI/CD pipeline integration for DevSecOps, tool accreditation and authorization, security compliance validation, and maintenance of tools in classified environments.
Work with team members to sustain and advance organizational capabilities.