Cyber Exploiter/Vulnerability Assessment Engineer (Cybersecurity)

Location: On-site in Chantilly, Virginia, United States. Must be a U.S. citizen with an active/current TS/SCI clearance and polygraph.

Company

hirify.global delivers mission solutions in data analytics, software development, engineering, targeting and analysis, training, and cyber operations.

What you will do

• Conduct vulnerability assessments across enterprise networks, applications, databases, operating systems, virtualization, cloud, containers, ICS/SCADA, storage, VoIP, cross-domain, and classified environments.
• Analyze logs, network traffic, scan data, false positives, business impact, and risk to produce technical findings, executive summaries, briefings, and remediation recommendations.
• Perform manual and tool-based testing, including privilege escalation, SQL injection, RCE, XSS, misconfiguration, wireless, cloud, identity, and application security testing.
• Develop, integrate, maintain, and accredit GOTS, COTS, and FOSS assessment tools, custom scripts, automation workflows, and the Mobile Packet Capture Toolkit or similar tools.
• Support targeting lifecycle activities, data collection, artifact management, configuration reviews, reporting, metrics, remediation tracking, and technical exchange meetings.

Requirements

• U.S. citizenship and an active/current TS/SCI clearance with polygraph are required.
• Bachelor's degree in Computer Science, Information Technology, or a related discipline, or an equivalent combination of education, certifications, training, and work or military experience.
• At least 5 years of related specific experience, including relationship and issue management, knowledge management, reporting, briefings, and communication with technical and non-technical audiences.
• Experience assessing Windows 10/11 and Windows Server 2016/2019/2022, Linux distributions, BSD systems, hypervisors, VDI, hyperconverged infrastructure, containers, and mainframe security concepts.
• Experience with network, web application, API, middleware, database, directory, authentication, authorization, SAN, wireless, Bluetooth, RFID, ICS/SCADA, VoIP, supply-chain, cross-domain, AWS, and Azure security assessments.
• Experience with tools and platforms including Nessus, Retina, RedSeal, HBSS, Qualys, OpenVAS, Nmap, Tenable.sc, Qualys VMDR, Wireshark, tcpdump, BloodHound, and PingCastle, including API integration, data normalization, correlation, and reporting.
• Experience developing vulnerability assessment automation with Python, PowerShell, Bash, Perl, Ruby, .NET, or another suitable language; integrating CI/CD pipelines for DevSecOps; and maintaining configuration-controlled toolsets.
• Knowledge of CIS benchmarks, OWASP Top 10, REST, GraphQL, Java, Python, .NET, JavaScript, cloud IAM, network segmentation, encryption, RMF, ICD 503, CNSS 4009, and classified-environment security requirements.
• Certifications listed include CISSP, OSCP, GPEN, CEH, GREM, Python, Linux+, Network+, Security+, and PMP; required skills identify PMP, Network+, Linux, CEH, Security+, and CISSP at an advanced level.

Nice to have

• GIAC GREM, OSWE, or developer certifications.
• Experience with CDS products such as Owl, Forcepoint, or BAE Systems.
• Additional familiarity with macOS, FreeBSD, mainframe security, ICS/SCADA, supply-chain security, AI/ML frameworks such as TensorFlow and PyTorch, and AI security risks.

Culture & Benefits

• Work alongside technical staff and external stakeholders to advance cyber operations capabilities.
• Support mission-critical customer requirements in a professional, integrity-focused environment.
• Full-time, on-site employment in Chantilly, Virginia.