Mid-Level Offensive Cyber Engineer

We are seeking a Mid-Level Offensive Cyber Engineer to join our INTEL Sector's Cyber & Analytics Business Area (CABA) in Lawton, OK. As a Mid-Level Offensive Cyber Engineer, you will perform comprehensive security assessments on enterprise and government systems, working closely with defensive teams to translate offensive tactics into resilient threat detections.

Primary Responsibilities:

• Develop custom exploits, payloads, and automated testing tools tailored to identified system vulnerabilities.
• Plan and execute penetration tests, vulnerability assessments, and network protocol analyses across enterprise, government, and classified environments.
• Collaborate with CEMA Resiliency System (CRS) team and detection engineering teams to develop, validate, and tune threat detectors based on adversary tactics, techniques, and procedures (TTPs).
• Travel to operational testing events to assess and verify exploit effectiveness in real-world scenarios.
• Research technical documentation, system architectures, and security classification guides.
• Author comprehensive technical reports, remediation roadmaps, and after-action summaries for both technical teams and leadership stakeholders.
• Mentor early-career engineers and assist in the planning of future operational test events.

Basic Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline with 6+ years of relevant experience; OR a Master’s degree with 4+ years of experience; OR an additional 4 years of related experience in lieu of a degree (10+ years total).
• 6+ years of hands-on experience in penetration testing, red teaming, or offensive cyber operations.
• Proficiency with Linux distributions (e.g., Kali, Parrot) and Windows operating systems at a deep-system/administrative level.
• Demonstrated experience developing custom scripts and tools using languages such as Python, Bash, or PowerShell.
• Strong understanding of networking concepts, TCP/IP architecture, and security assessment methodologies.
• Must be a US Citizen and be able to obtain and maintain an active Top Secret / Sensitive Compartmented Information (TS/SCI) security clearance.
• Willingness to work on-site in Lawton, OK (or relocate prior to start date) and travel to testing events as required.

Preferred Technical Experience:

• Certifications: Industry-recognized credentials such as OSCP, GPEN, GWAPT, CPTS, GXPN, or CEH.
• Testing & Exploitation Tools: Extensive experience with tools such as Burp Suite, Metasploit, Cobalt Strike, Nmap, and OWASP ZAP.
• Cloud Assessments: Practical experience assessing cloud platforms (AWS, Azure, GCP) using security tools (e.g., ScoutSuite, Pacu, Prowler).
• Defensive Alignment & MITRE: Practical experience mapping exploits to the MITRE ATT&CK framework, detection engineering, or SOC operations.
• Low-Level Analysis: Knowledge of binary analysis, reverse engineering, and low-level exploitation techniques.
• Government / Defense Background: Prior experience supporting DoD programs and working within classified security environments.

Benefits:

• Competitive benefits package including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and more.