Mid-Level Offensive Cyber Engineer

Leidos•Lawton, OK

7d•Onsite

About The Position

Leidos is hiring a Mid-Level Offensive Cyber Engineer (Penetration Tester) in its INTEL Sector's Cyber & Analytics Business Area. The role conducts comprehensive security assessments of enterprise and government systems and partners with defensive teams, including the CEMA Resiliency System, to translate offensive tactics into resilient threat detections. The position is located onsite in Lawton, Oklahoma, with travel to operational testing events as required. Candidates must be U.S. citizens and able to obtain and maintain an active TS/SCI clearance. The role includes developing custom exploits, payloads, and automated testing tools; planning and executing penetration tests and vulnerability assessments; analyzing network protocols; collaborating on detection development and validation; and assessing exploit effectiveness during operational tests. The engineer researches technical documentation, system architectures, and security classification guides, produces technical reports and remediation roadmaps, and mentors early-career engineers. Leidos describes its team as working across security engineering, computer network operations, mission software, analytical methods and modeling, signals intelligence, and cryptographic key management.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline with 6+ years of relevant experience; or a master’s degree with 4+ years of experience; or an additional 4 years of related experience in lieu of a degree (10+ years total).
At least 6 years of hands-on experience in penetration testing, red teaming, or offensive cyber operations.
Proficiency with Linux distributions such as Kali or Parrot and Windows operating systems at a deep-system or administrative level.
Demonstrated experience developing custom scripts and tools using languages such as Python, Bash, or PowerShell.
Strong understanding of networking concepts, TCP/IP architecture, and security assessment methodologies.
Must be a U.S. citizen and able to obtain and maintain an active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
Willingness to work onsite in Lawton, Oklahoma, or relocate before the start date, and travel to testing events as required.

Nice To Haves

Industry-recognized certifications such as OSCP, GPEN, GWAPT, CPTS, GXPN, or CEH.
Extensive experience with penetration testing and exploitation tools such as Burp Suite, Metasploit, Cobalt Strike, Nmap, and OWASP ZAP.
Practical experience assessing cloud platforms such as AWS, Azure, or GCP using tools such as ScoutSuite, Pacu, or Prowler.
Practical experience mapping exploits to the MITRE ATT&CK framework, detection engineering, or SOC operations.
Knowledge of binary analysis, reverse engineering, and low-level exploitation techniques.
Prior experience supporting DoD programs and working within classified security environments.

Responsibilities

Develop custom exploits, payloads, and automated testing tools tailored to identified system vulnerabilities.
Plan and execute penetration tests, vulnerability assessments, and network protocol analyses across enterprise, government, and classified environments.
Collaborate with the CEMA Resiliency System team and detection engineering teams to develop, validate, and tune threat detectors based on adversary tactics, techniques, and procedures.
Travel to operational testing events to assess and verify exploit effectiveness in real-world scenarios.
Research technical documentation, system architectures, and security classification guides.
Author technical reports, remediation roadmaps, and after-action summaries for technical teams and leadership stakeholders.
Mentor early-career engineers and assist in planning future operational test events.