Offensive Security Technical Lead

Vaga não está no LinkedIn

🕒 4 dias atrás

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $105.100 - $231.100 / ano

⏰ Tempo Integral

🟠 Sênior

🧑‍💻 Engenheiro Full-stack

👻 Score fantasma 0%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

CACI International Inc

SiteLinkedInTodas as Vagas

10.000+ funcionários

Fundada em 1962

🎖️ Defesa

🏛️ Governo

🔒 Cibersegurança

🔥 Investimento no último ano

💰 $500.000.000 Post-IPO Debt em 2026-02

Defense • Government • Cybersecurity

A CACI International Inc é uma empresa norte-americana contratada pelo governo que fornece tecnologias e serviços profissionais para clientes de segurança nacional, defesa e órgãos civis federais. A CACI oferece soluções em operações cibernéticas e digitais, modernização de TI corporativa, guerra eletrônica, sistemas contra veículos não tripulados (C-UxS), comunicações espaciais e ópticas, desenvolvimento de software ágil com DevSecOps e engenharia de missão e suporte logístico. A empresa se posiciona como uma grande prime contractor que utiliza software, analytics, sensoriamento e hardware avançados para detectar e neutralizar ameaças em evolução, além de modernizar as arquiteturas tecnológicas do governo.

Descrição

• Serve as the senior technical authority for penetration testing and red-team delivery across the RFS portfolio • Define and mature assessment standards, rules-of-engagement patterns, technical review gates, evidence requirements, severity methodology, reporting expectations, and reusable playbooks • Review and approve engagement plans, adversary scenarios, infrastructure designs, tooling exceptions, exploitation approaches, data-handling controls, and high-risk technical actions • Guide the technical team, assign scarce specialties, mentor staff, conduct technical readiness reviews, and resolve complex cross-domain problems • Provide hands-on support for network, application, Active Directory/identity, cloud, exploit-development, adversary-infrastructure, and defense-evasion challenges • Own final technical quality and acceptance for assessment reports, attack-path narratives, severity decisions, remediation recommendations, customer out-briefs, and purple-team scenarios • Lead technical customer discussions and communicate mission and business risk • Coordinate with project management on schedule, staffing, dependencies, and issue escalation without assuming administrative PM ownership • Capture lessons learned, measure technical quality and repeatability, and evolve the capability as customer processes and tools become known • Support the CDM Program’s mission to safeguard and secure U.S. Federal IT networks through continuous monitoring, diagnosis, and mitigation services

🎯 Requisitos

• U.S. citizenship is required • Eligibility for access to sensitive information and ability to obtain a Public Trust fitness determination (High Risk) • Ability to work in customer-provided remote environments and comply with rules of engagement, data-handling requirements, evidence controls, deconfliction procedures, and stop-work criteria • Eight or more years of progressively responsible offensive-security experience, including significant hands-on penetration testing and red-team/adversary-emulation delivery • Five or more years leading complex technical engagements, multiple concurrent assessments, or senior offensive-security teams • Expert ability to scope and govern safe testing across enterprise networks, applications/APIs, Windows/Active Directory and identity, Linux, AWS/Azure, external attack surfaces, and production environments • Demonstrated technical authority in rules of engagement, operational risk, deconfliction, exploit validation, evidence quality, severity decisions, report acceptance, and customer out-briefing • Strong scripting, automation, or tool-development capability • One or more advanced hands-on certifications such as OSEP/OSCE, OSWE, GXPN, GPEN, OSED/OSEE, CRTO/CRTL, or equivalent expert-level experience • Twelve or more years across offensive security, security research, adversary emulation, or technical-assessment leadership (desired) • Experience leading CISA, DHS, federal high-value-asset, critical-infrastructure, ICS/OT, or similarly sensitive assessment programs (desired) • Experience maturing an offensive-security program, establishing quality metrics, developing training, or building repeatable technical delivery standards (desired) • Advanced cloud, identity, exploit-development, malware/payload, detection-engineering, or purple-team expertise (desired) • Ability to brief senior government leadership and translate technical attack paths into operational and mission risk (desired)

🏖️ Benefícios

• Unique flexible time off benefit • Robust learning resources • Healthcare benefits • Wellness benefits • Financial benefits • Retirement benefits • Family support benefits • Continuing education benefits • Time off benefits • Flexible work-life balance