What are the responsibilities and job description for the OCO Tool Developer position at Dark Wolf?
Dark Wolf is seeking a Senior Software Engineer with a strong Offensive Security (OffSec) background to lead the development and implementation of mission-critical offensive tooling for a DoD customer. This is a high-impact, on site role requiring a technical leader who operates perfectly at the intersection of red team tradecraft and robust software engineering.
The successful candidate will work within an agile team to design, develop, and deliver custom capabilities, primarily utilizing Python within custom Debian-based Linux environments (similar to Kali Linux). We are looking for a builder—someone who understands adversarial tactics and can translate that knowledge into resilient, scalable, and stealthy software tools for the warfighter.
Key Responsibilities
We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
The successful candidate will work within an agile team to design, develop, and deliver custom capabilities, primarily utilizing Python within custom Debian-based Linux environments (similar to Kali Linux). We are looking for a builder—someone who understands adversarial tactics and can translate that knowledge into resilient, scalable, and stealthy software tools for the warfighter.
Key Responsibilities
- Act as the primary subject matter expert and lead developer for custom offensive tooling, integrating disparate capabilities into a cohesive, mission-ready platform.
- Design, build, and optimize software primarily in Python, tailored specifically for custom Debian/Kali Linux environments.
- Bridge the gap between OffSec and development by applying software design best practices to advanced threat emulation and red team capabilities.
- Architect and manage CI/CD automation pipelines (GitHub/GitLab), ensuring tools are built, tested, and deployed securely and reliably.
- Deploy and manage supporting infrastructure tailored for both custom Linux stacks and AWS cloud environments.
- Lead technical exchange meetings (TEMs), participate in Discovery & Framing workshops, and maintain effective communication with cross-functional teams and stakeholders.
- Apply Test-Driven Development (TDD) to automate testing, ensuring the end-user receives a reliable, "first-class" product in the field.
- Stay at the forefront of offensive tradecraft and backend technologies to formulate tactics for future platform enhancements.
- Proven experience developing software with a security-first or offensive mindset (Red Team tooling, exploit development, or advanced penetration testing automation).
- Deep, hands-on experience using Python as a primary development language for backend services, automation, or custom tooling.
- Extensive experience developing for and operating within Debian-based distributions (e.g., Debian, Kali Linux, Ubuntu).
- Willingness and ability to work onsite to support mission-critical, classified development.
- Experience with GitLab CI/CD (pipeline design, runners, artifact management) and AWS Cloud services (EC2, VPC, IAM, S3).
- Understanding of secure containerized workloads (Docker/Kubernetes) and vulnerability management.
- Experience with building and consuming REST APIs, as well as asynchronous programming.
- Strong troubleshooting and operational skills across Linux systems, CI/CD pipelines, and cloud infrastructure.
- Ability to collaborate effectively with other developers, security operators, and program leadership.
- US Citizenship and ability to be clearable up to the Top Secret clearance with SCI eligibility.
- Bachelor’s degree in Computer Science, IT Security, Information Systems, or equivalent experience.
- 15 years of demonstrated experience providing technical guidance on software architecture and automation.
- Experience operating in regulated, high-security, or compliance-driven DoD environments (Knowledge of FedRAMP, NIST 800-53, DoD IL2/IL4/IL5, ICD 503, RMF).
- Proficiency with Infrastructure-as-Code (e.g., Terraform/OpenTofu, Ansible) for repeatable deployments.
- Familiarity with Kubernetes (Amazon EKS) in production, multi-cluster, or secure environments.
- Relevant DoD 8570/8140 Certifications: IASAE Level II (CASP, CISSP, CSSLP) or AFMAN 17-1303 certification (Security , etc.).
- Certifications bridging development and security (e.g., OSCP, OSWE, OSEP, or similar).
We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
Salary : $155,000 - $180,000