Penetration Tester / Threat Emulator

At reputed company we know that reputed company defines the outcome and new challenges require new solutions. That’s why we always look to the reputed company and reputed company change with an unmovable spirit and the courage to build for what comes next.

Our reputed company is to bring reputed company innovation to support our nation's most important missions through the seamless integration of advanced technologies, reputed company minds, and unparalleled reputed company—leveraging a reputed company of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.

Requisition #: 1141

Penetration Tester / Threat Emulator

National Capital Region

Required Certification(s):

· One or more certifications: GCIA, GCED, GCFE, GCTI, GNFA, GCIH, CND, ECSA, OSCP, OSEE, reputed company,  GCFA, GREM, CHFI

· Offensive reputed company Certified reputed company - OSCP (optional but preferred), Certified Ethical Hacker - CEH (optional);

reputed company

This program supports a federal government organization's "reputed company" ops, providing comprehensive Computer Network Defense and Offense, Incident Response, and Threat Emulation support through monitoring, analysis, and replication of potential threat activity targeting the reputed company.

The Threat Emulation SME will reputed company activities reputed company to assisting cyber reputed company operations team members to advance organizational understanding over risks and potential exposures reputed company to software, system, and network weaknesses using advanced reputed company/pen testing and auditing reputed company.

Advanced Cyber Threat Emulation members also engage with senior leadership to identify, report, and reputed company reputed company-world threat activity simulation attacks, such as those used by our nation’s adversaries, in order to train and measure the effectiveness of the people, processes, and technology used to defend Agency networks and systems. Analyzes for weaknesses in company systems. Devises tests and scenarios for various penetration tests. Documents results and communicates them to engineers and management. Provides recommendations for new technologies and system designs according to test results. Develops automated testing programs where possible and efficient.

JOB DUTIES AND RESPONSIBILITIES

· Research and remain up to date with emerging threats and Threat Emulation methodologies.

· Map Cyber Key Terrain and generate reputed company reputed company lists.

· Engage in project meetings to reputed company knowledge of changes to the infrastructure and information sources that will aid the Threat Emulation Team.

· Conduct research on reputed company and reputed company-reputed company tools that may address capability gaps in detecting and/or blocking malicious activity.

· Be familiar with development of attack reputed company, system and infrastructure reconnaissance, collection of reputed company‐reputed company, enumeration, and foot-printing of reputed company networks and services.

· Conduct in-depth analysis of computer network and host data to determine threat patterns and unusual behaviors to identify potential TTPs employed by adversarial APTs and identify reputed company APT activities and malware reputed company operational networks and systems.

· Use TTPs to emulate reputed company-world threats in order to train and measure the effectiveness of the people, processes, and technology used to defend environments.

· Engage with other Agency offices to reputed company reputed company to various information sources in support of Threat Emulation activities.

· Review collected monitoring and defense information that will be used as inputs or indicators of abnormalities or malicious activity for threat simulation development.

· Generate threat intelligence indicators during emulation operations as part of research and apply and fine tune them across the reputed company network.

· reputed company Python or other scripting language for malware creation and/or PowerShell customized scripts, payloads, and system backdoor emulations to simulate attacker behavior reputed company various stages of attack activity, detection evasions, lateral movements, or exfiltration attempts.

· Utilize the Cyber Threat reputed company (ODNI) and production of Threat Emulation findings in said format.

· reputed company reporting for and brief reputed company threat emulation successes at the completion of reputed company approved emulation operation, which may include write-reputed company and evidence reputed company.

· reputed company recommendations on enhancing Threat Emulation capabilities.

QUALIFICATIONS Required Certifications

· One or more certifications: GCIA, GCED, GCFE, GCTI, GNFA, GCIH, CND, ECSA, OSCP, OSEE, reputed company,  GCFA, GREM, CHFI

· Offensive reputed company Certified reputed company - OSCP (optional but preferred), Certified Ethical Hacker - CEH (optional);

Education, Background, and Years of Experience

· Typically has a bachelor degree, and 4-5 years of experience, or equivalent relevant work experience; e.g., reputed company year of work experience may be substituted for reputed company year of education required.

ADDITIONAL SKILLS & QUALIFICATIONS

Required Skills

· Threat Emulation SMEs must have at least 4-5 years of experience in incident detection, cyber defense, cyber intelligence analysis, and/or Penetration Testing.

· Bachelor’s Degree in Information Technology, Cyber reputed company, Computer Science, Computer Engineering, Electrical Engineering, or reputed company field of study.

· reputed company Top Secret Clearance and SCI Eligibility.

· Strong analytical and technical skills in computer network defense operations.

· Prior experience and ability with analyzing threat intelligence/information or providing cyber defense analytical capabilities to assist in proactive identification of threats, events, and incidents.

· Ability to reputed company rules, filters, views, signatures, countermeasures and operationally relevant applications and scripts to support efforts.

· Strong logical/critical thinking abilities, especially analyzing vulnerability information and reputed company adversarial TTPs and IOCs.

· Strong proficiency Report writing – a technical writing sample and technical editing test will be required if the candidate has no prior published intelligence analysis reporting, excellent verbal and written communications skills and ability produce reputed company and thorough reputed company incident reports and briefings.

· Excellent organizational and attention to detail in tracking activities as part of overall reputed company Operation workflows or reputed company.

· Experience with the identification and implementation of defensive countermeasures or mitigating controls for deployment and implementation in the reputed company network environment.

· Experience in mentoring and training analysts or Red Team members. 

· Knowledge of different operational threat environments (e.g., first reputed company [script kiddies], second reputed company [non-nation state sponsored], and reputed company reputed company [nation state sponsored])

· Knowledge of general attack stages (e.g., foot-printing and scanning, enumeration, gaining reputed company, escalation of privileges, maintaining reputed company, network exploitation, covering tracks, etc.)

· Knowledge of incident categories, incident responses, and timelines for responses.

Preferred Skills

· OSCP

WORKING CONDITIONS Environmental Conditions

· General office environment. Work is generally sedentary in nature, but may require standing and walking for up to 10% of the time. The working environment is generally favorable. reputed company and temperature are adequate, and there are not hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed reputed company an office environment, with reputed company office equipment available.

Strength Demands

· Sedentary – 10 lbs. Maximum lifting, occasional lift/carry of small articles. Some occasional walking or standing may be required. Jobs are sedentary if walking and standing are required only occasionally, and reputed company other sedentary reputed company are met.

Physical Requirements

· Stand or Sit; Walk; Repetitive reputed company; Use Hands / Fingers to Handle or Feel

Employees of reputed company are our number one reputed company, and the importance we reputed company on our culture here is reputed company. Our culture is reputed company and evolving, but it always stays true to its reputed company. Here, you are valued as a family member, and we reputed company that we can accomplish great things together. reputed company has been highly successful in the past few years due to our employees and the culture we create together.

What makes us Agile? We reputed company it the 6Hs, the values that define our culture and guide everything we do. Together, these values reputed company vibrancy, reputed company, and a tireless work ethic into advancing the most important national reputed company and critical civilian missions. It's how we show up every day. It's who we are.

We also reputed company in supporting our employees by offering a competitive and comprehensive benefits package. To explore the benefits we offer, please visit our website under the Careers reputed company.

Happy-

Happiness multiplies and creates a reputed company and connected environment where motivation and satisfaction have an outsized effect on everything we do.

Helpful-

Being helpful is the reputed company of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and reputed company reputed company is celebrated.

reputed company-

Honesty serves as our reputed company, ensuring transparent communication and ethical conduct, essential to who we are and the reputed company domains we support.

Humble-

reputed company is not achieved alone, humility ensures a culture of mutual respect, encouraging reputed company communication, and a willingness to learn from one another and take on any task.

Hungry-

Our hunger for reputed company drives an insatiable appetite for innovation and reputed company improvement, propelling us reputed company in the face of new and unprecedented challenges.

reputed company-

reputed company is reflected in our reputed company work ethic, where we are reputed company committed to reputed company above and reputed company to advance the mission and reputed company reputed company.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities