Cyber Security Project Engineer (TS/SCI + Poly)

Description

The DarkStar Group, a GRVTY Company is seeking a Cyber Security Project Engineer with a TS/SCI + Poly clearance (applicable to this customer) to join one of our top projects in Herndon, VA.  Below is an overview of the project, as well as information on our company, and our benefits.

THE PROGRAM

The DarkStar Group is a member of 100% of the winning teams for the largest technology program in the Intel Community.  We've been supporting this customer on many different sub-projects of this program since our founding in 2013.  We've grown on this effort by providing the customer with Engineers who have done exceptional work, and we've retained our staff by paying very strong salaries, and working hard to ensure each Engineer is doing work that aligns with their career interest.

THE PROJECT

• The Sponsor’s team provides a highly technical and in-depth penetration testing service, in support of enterprise cyber security equities. The Sponsor requires support specializing in penetration testing and ethical hacking, to target, assess, and exploit risk and vulnerabilities of information systems. The intent is to provide senior decision makers with documented and actionable data to aid in making strategic investment decisions.

THE ROLE

• The Contractor shall document all identified system risks, planned test procedures, and results.
• The Contractor shall perform analyses of vulnerabilities identified during testing.
• The Contractor shall review program-level documentation such as requirements specification, system architecture, design documents, test plans, and security plans.
• The Contractor shall create and document penetration testing plans and procedures.
• The Contractor shall conduct hands-on penetration testing by leveraging approved testing plans and procedures.
• The Contractor shall analyze penetration test results, document risks, and recommend countermeasures to uncovered risks.
• The Contractor shall participate or lead technical exchange meetings and application review boards.
• The Contractor shall document action items and results from technical exchange meetings and application review boards.
• The Contractor shall brief management on the status of action items and results of activities.

Required Skills

• Demonstrated work experience in cyber security or related IT field.
• Demonstrated experience with cyber penetration testing.
• Demonstrated experience leveraging adversarial tactics to conduct hands-on security testing.
• Demonstrated experience applying computer attack methods and system exploitation techniques.
• Demonstrated working knowledge of cyber security principles for Linux, Windows, and virtual platforms.
• Demonstrated experience designing, testing, or implementing IT security architecture.
• Demonstrated experience performing network security analysis.
• Demonstrated experience analyzing network architectures.
• Demonstrated experience using network management tools
• Demonstrated experience developing risk management methodologies.
• Demonstrated experience analyzing test results to develop risk and threat mitigation plans.
• Demonstrated experience testing or reviewing system configuration, development, and design specifically around enterprise systems and hypervisors.
• Demonstrated experience designing, testing, or implementing complex Windows installations.

Desired Skills (Optional)

• Demonstrated experience participating in public and private information security groups and organizations.
• Demonstrated experience communicating vulnerability results and risk posture to senior executives.
• Demonstrated experience performing complex technical tasks with minimal direction.
• A Bachelor's degree in Computer Science, Information Systems, Engineering, or other related scientific or technical discipline.
• Two or more of the relevant certifications:
  • Offensive Security Certified Professional (OSCP)
  • Global Information Assurance Certification Penetration Tester (GPEN)
  • eLearn Security Certified Professional Penetration Tester (eCPPTv2)
  • Global Information Assurance Certification Web Application Penetration Tester (GWAPT)

Why Choose The DarkStar Group, a GRVTY Company

The DarkStar Group, a GRVTY Company, started with a simple, American idea: we do things not because they are easy but because they are hard. The DarkStar Group, a GRVTY Company, exists to answer challenges. We do it for customers in defense, intelligence, homeland security—anyone whose job it is to advance America’s strategic position. The size of the challenge we face demands new skills, new backgrounds, and new thinking. That’s what we’re here to deliv