Cyber Warfare Engineer

Booz Allen Hamilton•Colorado Springs, CO

21h

About The Position

As a cyber warfare engineer, you know how critical it is to stay ahead of evolving threats by identifying and exploiting vulnerabilities before adversaries can. At Booz Allen, you'll bring that expertise to a mission-focused team where you'll conduct testing and analysis to identify vulnerabilities and potential threat vectors into systems and networks, develop exploits, and engineer attack methodologies. You’ll apply advanced engineering skills and extensive technical expertise, develop innovative solutions to complex problems, work without considerable direction, and mentor and supervise team members. In this role, you’ll perform reconnaissance, collect and analyze open-source intelligence, and conduct enumeration and target profiling to support cyber efforts across the mission owners’ platforms, networks, and systems. Your ability to evaluate exploit impact and develop attack vectors, exploit payloads, and system backdoors will support security and mission owner readiness. This is your opportunity to help advance national security through cutting-edge cyber capabilities. Join us. The world can't wait.

Requirements

6+ years of experience with cybersecurity tools and techniques
5+ years of experience with penetration testing or red or purple team operations
5+ years of experience using risk frameworks, including NIST Risk Management Framework, MITRE ATT&CK or D3FEND, or Diamond Model
3+ years of experience in programming with Python, C/C++, Java, PowerShell, or Bash scripting
3+ years of experience with Blue Force Operations and building and testing virtual machines such as VirtualBox, VMWare, or Parallels
Experience with automation tools such as Ansible or Puppet
Experience with cyber physical systems, architectures, and protocols
Ability to be self-motivated, work independently and in a team environment, and mentor junior team members
TS/SCI clearance
HS diploma or GED

Nice To Haves

Experience with processes and best practices related to the management of information and technology risks
Experience with security standards, and information security and compliance frameworks, controls, and best practices
Experience conducting technical writing and presenting technical information to mixed skill level audiences, including non-technical and technical peers
Experience with cyber threats detection and mitigation, and dynamic malware analysis
Experience with malicious network traffic analysis
Knowledge of military assessments, training evaluations, and after-action reviews (AARs)
Ability to explain, present, demonstrate, and document the operational impact of a vulnerability or exploit
Cyber Operations or Penetration Testing Certification such as CEH, GPEN, GPXN, PenTest+, or OSCP Certification