Sr. Offensive Cyber Engineer

Leidos•Lawton, OK

23h•$107,900 - $195,050•Onsite

About The Position

Leidos is hiring a Sr. Offensive Cyber Engineer (Penetration Tester) in its INTEL Sector Cyber & Analytics Business Area. The role conducts comprehensive security assessments of enterprise and government systems, including classified environments, and combines offensive testing with collaboration with defensive security teams to turn attack findings into resilient threat detection capabilities. The position is based on-site at the Leidos office in Lawton, Oklahoma, with travel to operational testing events as required. Work includes developing custom exploits and automation tools, conducting penetration tests and vulnerability assessments, analyzing network protocols, cloud infrastructure, and web applications, and coordinating with Cyber Response System (CRS) teams to develop and validate threat detectors. The engineer researches technical documentation, serves as a subject matter expert on system classification guides and detection capabilities, and delivers technical findings, recommendations, and after-action reports to technical and executive stakeholders. At higher technical levels, the role also involves planning future testing events and identifying opportunities to strengthen organizational security. The role requires U.S. citizenship and the ability to obtain and maintain an active TS/SCI security clearance. Leidos describes its work as supporting national security.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline with at least 8 years of relevant experience; or a master’s degree with at least 6 years of experience; or 12 years of related experience in lieu of a degree.
At least 8 years of dedicated hands-on experience in penetration testing, red teaming, or offensive security operations.
Proficiency with Linux distributions such as Kali or Parrot and with Windows operating systems at an administrative or deep-system level.
Demonstrated scripting and development capability in languages such as Python, Bash, or PowerShell for tool automation and exploit modification.
Strong understanding of networking concepts, TCP/IP architecture, and security protocols.
U.S. citizenship and ability to obtain and maintain an active TS/SCI security clearance.
Willingness to work on-site in Lawton, Oklahoma, or relocate before the start date, and travel to testing events as required.
Strong written and verbal communication skills for technical documentation and executive reporting.
Ability to translate complex technical findings into actionable recommendations for diverse audiences.
Experience presenting security findings to technical teams and executive leadership.
Ability to collaborate across offensive and defensive security teams.

Nice To Haves

Offensive security certifications such as OSCP, GPEN, GWAPT, CPTS, or GXPN.
Experience in detection engineering, SOC operations, threat hunting, or using frameworks such as MITRE ATT&CK.
Experience assessing cloud environments (AWS, Azure, or GCP) with tools such as ScoutSuite, Pacu, or Prowler.
Experience with binary analysis, disassembly, and reverse engineering.
Familiarity with Git version control, CI/CD pipelines, and Agile workflows.
Prior experience in DoD or classified environments and familiarity with classification markings and handling procedures.

Responsibilities

Develop custom exploits, payloads, and automation tools tailored to identified system vulnerabilities.
Serve as the site technical lead and execute end-to-end penetration tests and vulnerability assessments across enterprise, government, and classified environments.
Perform detailed analysis of network protocols, cloud infrastructure, and web applications.
Collaborate with detection engineering and CEMA Resiliency System (CRS) teams to validate, test, and improve threat detectors using offensive tactics, techniques, and procedures.
Travel to operational testing events to verify exploit effectiveness in real-world scenarios.
Research technical system documentation and serve as a subject matter expert on system security classification guides and detection capabilities.
Prepare and present technical findings, remediation recommendations, and after-action reports for technical staff and executive stakeholders.
Identify future testing opportunities and support long-term operational planning to strengthen the organization's security posture.