Cyber Security Engineer

About the Organization
Now is a great time to join Redhorse Corporation. We are a solution-driven company delivering data insights and technology solutions to customers with missions critical to U.S. national interests. We’re looking for thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions and want to apply their talents supporting customers with difficult and important mission sets.

About the Role
Redhorse transforms the way government uses data and technology. To support this mission, we are seeking a Senior Penetration Tester to join a highly technical team providing in-depth penetration testing services in support of the Sponsor’s enterprise cyber security equities. In this role, you will act as an ethical hacker to target, assess, and exploit vulnerabilities of information systems, providing senior decision-makers with the actionable data necessary for strategic investment decisions. Your work will directly impact the security posture of critical government infrastructure, ensuring that risks are identified and mitigated before they can be exploited by adversaries.

The salary range provided for this position represents the anticipated base salary for successful candidates. Actual compensation will be determined based on a variety of factors, including relevant experience, education, certifications, skills, security clearance level, geographic location, market conditions, and internal equity. In addition to base salary, eligible employees may participate in Redhorse's comprehensive benefits programs and may be eligible for performance-based or other incentive compensation, where applicable.

Redhorse Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability, or any other protected class.

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Talent Acquisition at [email protected]

Redhorse Corporation shall, in its discretion, modify or adjust the position to meet Redhorse’s changing needs. This job description is not a contract and may be adjusted as deemed appropriate in Redhorse’s sole discretion.

• Conduct hands-on penetration testing and ethical hacking to target, assess, and exploit risks and vulnerabilities of information systems.

• Perform comprehensive analyses of identified vulnerabilities and document all system risks, planned test procedures, and results.

• Review and recommend changes to program-level documentation, including requirements specifications, system architecture, design documents, and security plans, to reduce system vulnerabilities.

• Create and document detailed penetration testing plans and procedures for approval and execution.

• Analyze test results to recommend effective countermeasures and mitigation strategies for uncovered risks.

• Lead or participate in Technical Exchange Meetings (TEMs) and Application Review Boards, documenting action items and briefing management on activity results.
• Active TS/SCI with Polygraph security clearance.

• 8+ years of experience in cyber security or a related IT field, with a significant focus on cyber penetration testing.

• Demonstrated experience applying computer attack methods, system exploitation techniques, and leveraging adversarial tactics to conduct hands-on security testing.

• Strong working knowledge of cyber security principles for Linux, Windows, and virtual platforms (including hypervisors).

• Demonstrated experience designing, testing, or implementing IT security architecture and complex Windows installations.

• Proven ability to perform network security analysis, analyze network architectures, and utilize network management tools.

• Experience developing risk management methodologies and analyzing test results to develop risk and threat mitigation plans.

• Experience testing or reviewing system configuration, development, and design, specifically for enterprise-scale systems.

We encourage all candidates who meet the basic requirements to apply, even if you do not have any of the following experience:

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related scientific/technical discipline.

• Experience participating in public and private information security groups and professional organizations.

• Proven ability to communicate complex vulnerability results and risk posture effectively to senior executives.

• Experience researching, evaluating, and developing security policies and guidance.

• History of performing complex technical tasks with minimal direction in a fast-paced environment.