Jr. Offensive Cyber Engineer

Tooling Equities Leadership Purchasing Resilience Upskilling Kali Linux Metasploit Burp Suite Market Data Cryptography Cyber Security Key Management Microsoft Azure Computer Science Threat Detection Network Protocols Computer Networks Cyber Engineering Analytical Method Linux Distribution Penetration Testing Amazon Web Services GIAC Certifications Time Off Management Security Engineering Project Stakeholders Computer Engineering Signals Intelligence CompTIA Certification Electrical Engineering Software Documentation MITRE ATT&CK Framework, Leidos has a new and exciting opportunity for a Jr. Offensive Cyber Engineer in our INTEL Sector’s Cyber & Analytics Business Area (CABA). Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. At Leidos, we offer competitive benefits, including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in National Security!

The Jr. Offensive Cyber Engineer needs to have hands-on experience in penetration testing and/or detection engineering to join our team in Lawton, OK. In this role, you will perform technical security assessments, execute penetration tests on enterprise and government systems, and collaborate with defensive security teams (CEMA Resiliency System [CRS]) to translate offensive tactics into robust threat detections.

Primary Responsibilities:

• Develop custom exploits, payloads, and automated scripts based on identified system vulnerabilities.
• Conduct vulnerability assessments and assist in penetration tests across network protocols, web applications, and cloud environments.
• Collaborate with CEMA Resiliency System (CRS) and detection engineering teams to validate, test, and improve threat detectors based on offensive tactics, techniques, and procedures (TTPs).
• Participate in operational testing events to verify exploit effectiveness in realistic, mission-critical environments.
• Research technical system documentation, architecture diagrams, and security classification guides.
• Document findings clearly and author comprehensive technical reports, remediation guidance, and after-action reviews for technical and project stakeholders.

GIAC Penetration Tester Vulnerability Management Certified Ethical Hacker Internet Protocols Suite Vulnerability Assessments Bash (Scripting Language) Ubuntu (Operating System) Post-Anesthesia Care Unit Python (Programming Language) Endpoint Detection And Response GIAC Web Application Penetration Tester Offensive Security Certified Professional Open Web Application Security Project (OWASP) Security Information And Event Management (SIEM) Top Secret-Sensitive Compartmented Information (TS/SCI Clearance)

At least 2 years, * Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline with 2+ years of relevant experience; OR a Master’s degree with 0+ years of experience; OR an additional 4 years of related experience in lieu of a degree (6+ years total).

• 2+ years of hands-on technical experience in penetration testing, vulnerability assessments, or red teaming.
• Working proficiency with Linux distributions (e.g., Kali, Parrot, Ubuntu) and Windows operating systems.
• Demonstrated ability to write scripts/tools in languages such as Python, Bash, or PowerShell.
• Solid understanding of core networking protocols (TCP/IP), network architecture, and common vulnerability classes.
• Must be a US Citizen with the ability to obtain and maintain an active Top Secret / Sensitive Compartmented Information (TS/SCI) security clearance.
• Willingness to work on-site in Lawton, OK (or relocate prior to start date) and travel to testing events as required., * Certifications: Industry-recognized certifications such as OSCP, GPEN, GWAPT, CPTS, PNPT, CEH, CompTIA PenTest+, or GSEC.
• Testing Tooling: Experience using standard assessment and exploitation tools (e.g., Burp Suite, Metasploit, Nmap, OWASP ZAP, Cobalt Strike).
• Cloud & Modern Tech: Hands-on exposure to evaluating cloud environments (AWS, Azure, GCP) and cloud assessment tools (e.g., ScoutSuite, Pacu, Prowler).
• Defensive Alignment: Familiarity with MITRE ATT&CK, threat detection engineering, SIEM/EDR rule development, or SOC operations.
• Low-Level Knowledge: Coursework or practical experience in reverse engineering, assembly, or binary analysis.
• Defense / Government Experience: Prior experience supporting DoD or government systems and working with classified data handling procedures.

If you’re looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We’re not hiring followers. We’re recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We’re already at step 30 - and moving faster than anyone else dares.

Pay and benefits are fundamental to any career decision. That’s why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits .

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com .