What are the responsibilities and job description for the Security Software Engineer- Red Team Penetration Tester position at ANALYGENCE?
ANALYGENCE is seeking a skilled Security Software Engineer with a strong foundation in reverse engineering, penetration testing, and secure software development. This role will contribute to the design, analysis, and testing of secure systems and applications, with a focus on offensive security capabilities in complex DoD and enterprise environments. This position will provide support to NSWCDD located in Dahlgren, VA, or Virginia Beach, VA.
Responsibilities:
- Perform penetration testing and Red Team operations, simulating adversary tactics using tools such as Kali Linux, Metasploit, NMAP, and Cobalt Strike.
- Reverse engineer and debug compiled and source code to identify vulnerabilities and develop remediation strategies.
- Conduct static source code analysis, participate in code reviews, and author secure coding recommendations.
- Develop and debug software and scripts in Python, C, C#, C , Go, Perl, PowerShell, PHP, ASP, Java, HTML, SQL, and NoSQL environments.
- Analyze and monitor systems using Windows Event Logs, Linux syslogs, boot logs, and dmesg.
- Design and maintain GUIs; manage configuration using tools such as Rational ClearCase.
- Identify flaws in systems running VxWorks, LynxOS, and enterprise operating systems (Windows, HP-UX, UNIX, Solaris, Linux).
- Work with virtualization and enterprise platforms such as VMware NSX, vCenter, vRealize Suite, Horizon View (VDI).
- Apply DISA STIGs and security best practices across on-premise and hybrid infrastructures.
- Implement NSA-approved encryption technologies and integrate secure protocols and firewalls (PAN-OS, FirePower, Nexus, IOS, ASA).
- Administer and secure directory services including Active Directory, Entra ID (Azure AD), with integration for SSO, MFA, Azure App Integration, and Identity Federation.
- Automate processes using PowerShell, PowerAutomate, Logic Apps, and Graph API.
- Manage and secure environments with NetApp ONTAP, SnapMirror, and Microsoft 365 in hybrid deployments.
- Conduct Red Team operations in Microsoft Defender for Endpoint (MDE) environments.
- Perform Web Application Penetration Testing for RESTful/SOAP services and OAuth2, SAML, LDAP protocols.
- Support cloud-native security efforts within AWS, including services like EC2, S3, RDS, KMS, and microservice/serverless architectures.
- Recommend secure software architecture enhancements and contribute to tool/exploit/C2 development.
- Minimum of 5 years of experience in software engineering applied to program development; modeling and simulation applied to DoD or IT Systems.
- Minimum of 5 years of experience in:
- Firm grasp of Linux
- Associated training: COMPTIA Linux or FedVTE Linux
- Minimum of 5 years of experience in:
- Firm grasp of Windows
- Associated training: Microsoft Courses (MCSA or related)
- Working knowledge of common Penetration Testing tools i.e. Kali, Metasploit, NMAP, Cobalt Strike
- Minimum certification as a Pen Tester and possess one of the following certifications/qualifications:
- CEH, OSCP, GPEN, OSEE, OSWP, GXPN, OSD Sponsored COAC, Capture the Flag , Hack the Box, or USS Secure CTF participant, or security research resulting in CVE
- Experience with programing languages such as Python, C, C Sharp, C , Go, Perl, PowerShell
- Minimum IAT Level II per DoD 8570.01
- Strong understanding of DoD Cybersecurity policies for both Land Based and afloat/tactical systems.
- Ability to communicate clearly and succinctly in written and oral presentations.
- Minimum Active Secret Clearance.
ANALYGENCE is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decision without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.