Senior Cyber Engineer

Location: Washington, DC

Work Location: onsite

• Knowledge of Adversary Emulation & Defensible Architecture: Leverage expert knowledge of adversary TTPs (MITRE ATT&CK, Diamond Model, Cyber Kill Chain) to analyze system architectures requirements, identify security gaps in documentation, and advise in the acquisition of architecture that is robust with Defense-in-Depth mitigations.
• Program Management Support: Assist government in management of vendor activities and advise government on technical direction related to the planned development and delivery of capabilities. 
• Threat Intelligence Fusion: Synthesize intelligence reports, commercial/threat intelligence platforms, and tactical data into actionable feedback to support acquisitions decisions.
• Technical Mentorship & Team Collaboration: Work independently on assigned projects while mentoring cross-functional team members in offensive/defensive cyber operations tradecraft as well as technical best practices.

• Professional Experience:
• At least 9+ years of related professional cybersecurity experience with a Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, or a related technical discipline (or Associates degree with 7+ years of experience; or 15+ years of experience without degree).
• Threat Hunting & Incident Response: Proven track record conducting proactive threat hunts, incident response investigations, forensics, and log analysis in enterprise or mission network environments.
• Adversary Tradecraft & Frameworks: Deep practical understanding of cybersecurity frameworks and models, including the MITRE ATT&CK framework, the Cyber Kill Chain, and the Diamond Model of Intrusion Analysis.
• Network Security & Monitoring: Hands-on experience with network security monitoring (NSM) and intrusion detection/prevention systems (NIDS/NIPS), such as Zeek, Suricata, or Snort.
• SIEM & Data Platforms: Demonstrated experience configuring, administering, or utilizing SIEM and log analytics platforms such as Elastic Security (ELK) or Splunk.
• Scripting & Software Engineering: Strong proficiency in scripting and capability development using Python and Bash; working familiarity with C/C++ is highly desirable for binary analysis and gateway integration.
• Systems Hardening & Defense-in-Depth: Practical knowledge of Defense-in-Depth principles, operating system hardening (Linux/Windows), network segmentation, and system architecture vulnerability assessments.
• Containers & Orchestration: Experience deploying, troubleshooting, and managing applications using Docker containers.
• Automation & Configuration Management: Familiarity with automation and configuration management tools such as Ansible.
• DoD / National Security Experience: Prior experience supporting federal, DoD, Intelligence Community (IC), or joint military cyber components.
• Security Clearance: Active Top Secret Clearance with SCI eligibility required (current TS/SCI with CI Polygraph preferred).

• Advanced Malware Analysis & Reverse Engineering: Documented experience in static and dynamic binary analysis, IDA Pro/Ghidra disassembly, and coordination of novel threat disclosure.
• Applied Machine Learning in Cyber: Experience applying machine learning models (e.g., EMBER, neural networks, or decision tree classifiers) to static malware classification, behavioral analysis, or anomaly detection.
• Offensive Tradecraft & Red Teaming: Completion of advanced offensive cyber coursework (e.g., USCYBERCOM Advanced Operator Course [AOC], CNOQC, or commercial equivalents) or experience performing penetration testing and exploit analysis.
• Version Control & CI/CD: Experience utilizing GitLab for source control, automated testing, and CI/CD deployment pipelines.
• Mission Support Experience: Prior experience supporting U.S. Space Force Defensive Cyberspace Operations for Space (DCO-S) missions or USCYBERCOM / Cyber National Mission Force (CNMF) teams.
• Cloud & Classified Environments: Experience defending or deploying within DoD cloud environments at Secret, Top Secret, or SAP/SAR classification levels.
• Advanced Degree: Master of Science in Computer Science, Computer Engineering, or Cyberspace Operations.
• Industry & DoD Certifications:
• Forensics / Malware / CTI: GIAC Reverse Engineering Malware (GREM), GIAC Certified Forensic Analyst (GCFA), GIAC Cyber Threat Intelligence (GCTI), Recorded Future Certified Analyst.
• Offensive / Exploit Research: GIAC Exploit Researcher & Advanced Penetration Tester (GXPN), GIAC Red Team Professional (GRTP), GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT).
• Defense & Infrastructure: GIAC Defending Advanced Threats (GDAT), CompTIA Security+.
• DoD / USCYBERCOM Work Roles: Certification as a Malware Analyst, Basic Cyber Operator (BCO), Cyber Operations Planner, or Mission Commander.

• Work Environment: Secure Compartmented Information Facility (SCIF) and operational cyber operations center environment.
• Travel: Occasional CONUS travel may be required (approximately 10–15%) to support integrations, or threat response.