Sr. Offensive Cyber Engineer

Leidos•Lawton, OK

6d•Onsite

About The Position

Leidos is seeking an experienced Sr. Offensive Cyber Engineer (Penetration Tester) with detection engineering capabilities to conduct comprehensive security assessments of enterprise and government systems, including classified environments. The role combines offensive testing with close collaboration with defensive security and CEMA Resiliency System (CRS) teams to turn attack findings into resilient threat detection capabilities. The position is full-time and based at the Leidos office in Lawton, Oklahoma, with travel to operational testing events as required. The engineer will develop custom exploits and automation tools based on identified vulnerabilities, verify exploit effectiveness in operational environments, and help detection engineering teams develop and validate threat detectors. The role also involves technical research, serving as a subject matter expert on system classification guides and detection capabilities, and delivering technical findings, recommendations, and after-action reports to offensive and defensive stakeholders. As site technical lead, the engineer will execute end-to-end penetration tests and vulnerability assessments and conduct in-depth analysis of network protocols, cloud infrastructure, and web applications. At higher technical levels, the role includes planning future testing events and identifying opportunities to improve the organization’s security posture.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline with 8 or more years of relevant experience; or a master’s degree with 6 or more years of experience; or 12 or more years of related experience in lieu of a degree.
At least 8 years of hands-on experience in penetration testing, red teaming, or offensive security operations.
Proficiency with Linux distributions such as Kali or Parrot and administrative or deep-system-level experience with Windows operating systems.
Demonstrated scripting and development capability using languages such as Python, Bash, or PowerShell for tool automation and exploit modification.
Strong understanding of networking concepts, TCP/IP architecture, and security protocols.
Must be a U.S. citizen and able to obtain and maintain an active TS/SCI security clearance.
Willingness to work on-site in Lawton, Oklahoma, or relocate before the start date, and travel to testing events as required.

Nice To Haves

Offensive security certifications such as OSCP, GPEN, GWAPT, CPTS, or GXPN.
Experience in detection engineering, SOC operations, threat hunting, or using frameworks such as MITRE ATT&CK.
Experience evaluating AWS, Azure, or GCP cloud environments using assessment tools such as ScoutSuite, Pacu, or Prowler.
Experience with binary analysis, disassembly, and reverse engineering.
Familiarity with Git version control, CI/CD pipelines, and Agile workflows.
Prior experience in DoD or classified environments and familiarity with classification markings and handling procedures.
Strong written and verbal communication skills for technical documentation and executive reporting.
Ability to translate complex technical findings into actionable recommendations for diverse audiences.
Experience presenting security findings to technical teams and executive leadership.
Ability to collaborate across offensive and defensive security teams.

Responsibilities

Develop custom exploits, payloads, and automation tools tailored to identified system vulnerabilities.
Serve as the site technical lead, executing end-to-end penetration tests and vulnerability assessments across enterprise, government, and classified environments.
Perform in-depth analysis of network protocols, cloud infrastructure, and web applications.
Collaborate with detection engineering and CEMA Resiliency System (CRS) teams to validate, test, and improve threat detectors based on offensive tactics, techniques, and procedures.
Travel to operational testing events to verify exploit effectiveness in real-world scenarios.
Research technical system documentation and serve as a subject matter expert on system security classification guides and detection capabilities.
Author and present technical findings, remediation recommendations, and after-action reports for technical staff and executive stakeholders.
Identify future testing opportunities to strengthen the organization’s security posture.