Cyber Security Project Engineer

Fantom Corporation•Herndon, VA

23h•Onsite

About The Position

Fantom Corporation is a mission-focused organization supporting critical programs across the defense and intelligence community. We partner with our customers to deliver high-impact technical solutions while fostering a culture built on trust, expertise, and long-term career growth. We are seeking a skilled Cyber Security Project Engineer to join our team and contribute to meaningful, mission-driven work for our customer. We are seeking a highly skilled Cyber Security Project Engineer to support enterprise cybersecurity initiatives through advanced penetration testing and ethical hacking. This role focuses on identifying, assessing, and exploiting vulnerabilities across complex information systems in order to provide senior leadership with actionable insights to inform strategic risk and investment decisions. The ideal candidate brings deep technical expertise in adversarial testing, system exploitation, enterprise security architecture, and risk analysis across diverse environments, along with the ability to manage technical efforts within a structured project environment.

Requirements

Demonstrated professional experience in cybersecurity or a related IT field.
Hands-on experience conducting cyber penetration testing.
Experience leveraging adversarial tactics for security testing.
Experience applying computer attack methods and system exploitation techniques.
Working knowledge of cybersecurity principles across Linux, Windows, and virtual platforms.
Experience designing, testing, or implementing IT security architectures.
Experience performing network security analysis and evaluating network architectures.
Experience using network management tools.
Experience developing risk management methodologies.
Experience analyzing test results to produce actionable risk mitigation plans.
Experience reviewing system configuration, development, and enterprise system design, including hypervisors.
Experience designing, testing, or implementing complex Windows installations.
Must be fully cleared with a recent polygraph
Must be willing and able to work fully onsite at the location listed in this posting

Nice To Haves

Experience participating in public or private information security groups and professional organizations.
Experience briefing vulnerability findings and enterprise risk posture to senior executives.
Ability to perform complex technical tasks with minimal supervision.
Experience with Google Cloud Platform (GCP).
Experience with Oracle Cloud Infrastructure (OCI).
Bachelorâs degree in Computer Science, Information Systems, Engineering, or a related technical discipline.
Certified Ethical Hacker (CEH)
Offensive Security Certified Professional (OSCP)
GIAC Penetration Tester (GPEN)

Responsibilities

Conduct advanced penetration testing and hands-on security assessments across enterprise systems and networks.
Apply adversarial tactics, techniques, and procedures (TTPs) to simulate real-world threat scenarios.
Identify, exploit, and document vulnerabilities within operating systems, applications, virtual environments, and network infrastructures.
Perform network security analysis and evaluate enterprise network architectures.
Analyze system configurations, development practices, and enterprise design â including hypervisors and virtualized platforms.
Design, test, and evaluate IT security architectures and complex Windows environments.
Develop and refine risk management methodologies.
Analyze penetration testing results and develop comprehensive risk mitigation and threat reduction strategies.
Use network management and security tools to assess system performance and vulnerabilities.
Communicate technical findings, risk posture, and remediation strategies to both technical teams and senior decision-makers.
Support project planning, execution, and reporting within established timelines and requirements.