Apply on Employer Site

Data Intelligence, LLC · 3 weeks ago

Security Software Engineer - Red Team Pen Tester

Dahlgren, VA

Full-time

Onsite

Senior Level

5+ years exp

Data Intelligence, LLC is seeking a seasoned Security Software Engineer — Red Team / Penetration Tester to join their offensive security team supporting mission systems in the defense domain. The role focuses on planning and executing advanced penetration tests, developing offensive tooling, and collaborating with various teams to enhance security measures.

Cyber SecurityInformation TechnologyProject Management

Comp. & Benefits

No H1B

Security Clearance Required

U.S. Citizen Only

Hiring Manager

Lindsey McManus

Responsibilities

Plan and execute advanced penetration tests and red-team engagements against enterprise, cloud, and mission systems (including VDI, virtualization stacks, network enclaves, identity systems, and web services)

Design, develop, and maintain offensive tooling, exploit code, C2 components, and automation to support engagements

Conduct network, host, web application, cloud, and identity-centric assessments (including REST/SOAP web services and modern auth protocols such as OAuth2/SAML/LDAP)

Perform vulnerability discovery, exploit development, privilege escalation, lateral movement, persistence techniques, and post-exploitation analysis

Use and extend common pentest frameworks and tools (Kali, Metasploit, Nmap, Cobalt Strike) and integrate custom scripts and modules

Evaluate and document attack paths, IM/SSO/MFA bypass scenarios, and misconfigurations across Microsoft Entra ID (Azure AD), Active Directory, hybrid Microsoft 365 environments, and federation/SSO integrations

Test and evaluate network and security devices (Palo Alto, Cisco, FirePower, IOS/ASA, Nexus) and virtualization/storage platforms (vCenter/vRealize/Horizon, NetApp/ONTAP, SnapMirror)

Perform cloud security assessments (AWS, serverless, microservices) and audit cloud configurations and workloads

Produce clear, actionable deliverables: technical findings, exploit proofs-of-concept, attack narratives, remediation guidance, and executive summaries for stakeholders

Collaborate with blue teams, DevSecOps, and engineering teams to validate fixes and drive continuous improvement

Qualification

Penetration TestingRed Team OperationsOffensive ToolingLinuxWindows AdministrationPythonAWSActive DirectoryTechnical WritingCollaboration

Required

Bachelor's degree in Computer Science, Engineering, Information Security, or equivalent experience preferred

Minimum 5 years of software engineering applied to program development, modeling, or simulation for DoD or IT systems

Minimum 5 years hands-on experience with Linux: firm grasp / demonstrated knowledge (training such as CompTIA Linux+ or FedVTE Linux+ preferred)

Minimum 5 years hands-on experience with Windows & enterprise networks: foundational understanding of Windows enterprise administration (relevant Microsoft coursework/certification experience preferred)

Strong working knowledge and practical use of Kali, Metasploit, Nmap, Cobalt Strike

Documented operational experience in at least one of the following: Penetration Testing (government or contractor), Red Team Operations (government or contractor), Tool/Software Development (exploits, malware/C2, reverse engineering, bug bounties), Offensive/defensive programming in Python, C, C#, C++, Go, Perl, PowerShell, Web development / web application penetration testing (PHP, ASP, SQL/NoSQL, Java, HTML), including RESTful and SOAP services and modern authentication schemes

Minimum certification: Must hold one of the following (or equivalent, current): Offensive Security: OSCP, OSCE, OSEE, OSWP; SANS: GPEN (SEC560), GWAPT (SEC542), SEC660, GXPN, SEC642, SEC564

Operational tools/platform familiarity: experience with virtualization & VDI stacks (NSX, vCenter, vRealize, Horizon), network/security appliances (Palo Alto, Cisco), storage platforms (NetApp/ONTAP), and virtualization/cloud platforms (VMware, AWS)

Demonstrable experience with Active Directory, Microsoft Entra ID (Azure AD), SSO/MFA, identity federation, and automation using PowerShell / PowerAutomate / Logic Apps / Graph API

Current Top Secret Security Clearance

Preferred

Prior experience conducting Red Team operations in an MDE (Managed Detection & Response / Microsoft Defender for Endpoint) environment

Experience with cloud audit, serverless, microservice architectures and security

Prior development of offensive tooling, exploit chains, or C2 frameworks

Familiarity with DoD and government network enclaves, operational tradecraft, and mission-critical systems

Prior experience working on DoD or national security contracts and understanding of classification and handling of sensitive findings

Strong technical writing and presentation skills; ability to translate technical findings for non-technical leadership

Benefits

Medical, dental and vision insurance

401k

PTO

11 paid holidays

Company

Data Intelligence, LLC

Data Intelligence, LLC (DI) provides mission focused systems engineering, full lifecycle software development and cybersecurity solutions for complex IT and C5ISR system.

Founded in 2005

Marlton, New Jersey, USA

51-200 employees