Security Software Engineer

and the job listing Expires on February 27, 2026

The Security Software Engineer – Penetration Tester utilizes in-depth understanding and experience in computer science and complex penetration testing methodologies to assist in securing combat systems and PIT in both afloat and shore-based systems by identifying threat vectors and vulnerabilities..

• Performs software code reviews to identify flaws in complied and human- readable software code.
• Plan and perform Red Team and penetration testing to assess viability of security controls and policy compliance status.
• Performs reverse engineering of malicious tools, threat systems and bugs to assist in securing systems or exploitation of threat systems.

• Due to the sensitivity of customer related requirements, U.S. Citizenship is required.
• Active Top Secret security clearance with eligibility for SCI access.
• Requires Bachelor’s (BS/BA) degree in computer science plus 5 years’ experience and demonstrated knowledge of various operating systems including LINUX, Windows and virtualization tools such as VMWare.
• Requires experience with working knowledge of common Penetration Testing (PENTEST) tools such as Kali, Metasploit, Nmap, Cobalt Strike.
• Minimum certification as IAT Level II per DoD 8570.01 with a minimum certification as penetration tester and possess one the following offensive security certifications (OSCP, OSCE, OSEE, OSWP, GPEN, GXPN, or Red Team Operations and Threat Emulation).
• Experience with Web Services penetration testing (RESTful and SOAP) Web Authentication protocols and using Programming tools such as Python, C, C Sharp, C++, Go, Perl, or Powershell.
• Possess the ability to debug and reverse engineer software, analyze Windows events and Linux syslogs, boot logs and dmesg logs.
• Possess the ability to identify security flaws in compiled and human readable source code and recommend software modifications to systems to mitigate known vulnerabilities;
  Operate and administer computer systems running HP-UX, UNIX, Solaris, Linux and Microsoft Windows..
• Experience researching, assessing and performing continuous monitoring under the RMF process in accordance with DoD 8510.01 and NIST Publications.

• OSD Sponsored Cyber Operation Academy Course (COAC) graduate.
• Red Team Experience.
• Familiarity with Naval Combat Systems and Platform IT.