Mid-Level Offensive Cyber Engineer

Leidos•Lawton, OK

23h•$87,100 - $157,450•Onsite

About The Position

Leidos is hiring a Mid-Level Offensive Cyber Engineer (Penetration Tester) in its INTEL Sector’s Cyber & Analytics Business Area. The role combines offensive security evaluations with detection engineering, partnering with defensive teams—including the CEMA Resiliency System—to translate offensive tactics into resilient threat detections. The position is based onsite in Lawton, Oklahoma, with travel to operational testing events as required. The engineer will assess enterprise, government, and classified systems, develop tailored exploits and tools, report findings, and support and mentor other engineers.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline and 6+ years of relevant experience; or a master’s degree and 4+ years of experience; or 10+ years of related experience in lieu of a degree.
6+ years of hands-on experience in penetration testing, red teaming, or offensive cyber operations.
Proficiency with Linux distributions such as Kali or Parrot and Windows operating systems at a deep-system or administrative level.
Experience developing custom scripts and tools using languages such as Python, Bash, or PowerShell.
Strong understanding of networking concepts, TCP/IP architecture, and security assessment methodologies.
Must be a U.S. citizen and able to obtain and maintain an active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
Willingness to work onsite in Lawton, Oklahoma, or relocate before the start date, and travel to testing events as required.

Nice To Haves

Industry-recognized certifications such as OSCP, GPEN, GWAPT, CPTS, GXPN, or CEH.
Extensive experience with testing and exploitation tools such as Burp Suite, Metasploit, Cobalt Strike, Nmap, and OWASP ZAP.
Practical experience assessing cloud platforms such as AWS, Azure, or GCP using security tools such as ScoutSuite, Pacu, or Prowler.
Practical experience mapping exploits to the MITRE ATT&CK framework, detection engineering, or SOC operations.
Knowledge of binary analysis, reverse engineering, and low-level exploitation techniques.
Prior experience supporting DoD programs and working in classified security environments.

Responsibilities

Develop custom exploits, payloads, and automated testing tools tailored to identified system vulnerabilities.
Plan and execute penetration tests, vulnerability assessments, and network protocol analyses across enterprise, government, and classified environments.
Collaborate with the CEMA Resiliency System team and detection engineering teams to develop, validate, and tune threat detectors based on adversary tactics, techniques, and procedures.
Travel to operational testing events to assess and verify exploit effectiveness in real-world scenarios.
Research technical documentation, system architectures, and security classification guides.
Author technical reports, remediation roadmaps, and after-action summaries for technical teams and leadership stakeholders.
Mentor early-career engineers and assist in planning future operational test events.