Apply on Employer Site

DCS Corp · 1 day ago

Security Software Engineer

Virginia Beach, VA

Full-time

Onsite

Senior Level

5+ years exp

DCS Corp is seeking a Security Software Engineer – Penetration Tester to enhance the security of combat systems and shore-based systems. The role involves performing software code reviews, conducting penetration testing, and reverse engineering malicious tools to identify vulnerabilities and threat vectors.

AerospaceManagement ConsultingNational Security

Culture & Values

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Performs software code reviews to identify flaws in complied and human-readable software code

Plan and perform Red Team and penetration testing to assess viability of security controls and policy compliance status

Performs reverse engineering of malicious tools, threat systems and bugs to assist in securing systems or exploitation of threat systems

Qualification

Penetration TestingReverse EngineeringOperating SystemsOffensive Security CertificationsWeb Services TestingProgramming ToolsDebugging SkillsRed Team ExperienceCyber Operation AcademyNaval Combat Systems

Required

U.S. Citizenship is required

Active Top Secret security clearance with eligibility for SCI access

5 years' experience and demonstrated knowledge of various operating systems including LINUX, Windows and virtualization tools such as VMWare

Experience with working knowledge of common Penetration Testing (PENTEST) tools such as Kali, Metasploit, Nmap, Cobalt Strike

Minimum certification as IAT Level II per DoD 8570.01 with a minimum certification as penetration tester and possess one of the following offensive security certifications (OSCP, OSCE, OSEE, OSWP, GPEN, GXPN, or Red Team Operations and Threat Emulation)

Experience with Web Services penetration testing (RESTful and SOAP) Web Authentication protocols and using Programming tools such as Python, C, C Sharp, C++, Go, Perl, or Powershell

Possess the ability to debug and reverse engineer software, analyze Windows events and Linux syslogs, boot logs and dmesg logs

Possess the ability to identify security flaws in compiled and human readable source code and recommend software modifications to systems to mitigate known vulnerabilities

Operate and administer computer systems running HP-UX, UNIX, Solaris, Linux and Microsoft Windows

Researching, assessing and performing continuous monitoring under the RMF process in accordance with DoD 8510.01 and NIST Publications

Bachelor's (BS/BA) degree in computer science and five years' experience