Offensive Security Technical Lead

Emploi pas sur LinkedIn

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

💵 $105 100 - $231 100 / an

⏰ Temps Plein

🟠 Senior

🧑‍💻 Développeur Full-Stack

👻 Score fantôme 20%

Ce que ça veut dire : la probabilité que personne ne recrute vraiment pour cette offre.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

CACI International Inc

Site WebLinkedInTous les Emplois

10 000+ employés

Fondée en 1962

🎖️ Défense

🏛️ Gouvernement

🔒 Cybersecurity

🔥 Financement dans la dernière année

💰 €500 000 000 Post-IPO Debt en 2026-02

Defense • Government • Cybersecurity

CACI International Inc est un prestataire américain de services et de technologies pour le gouvernement, qui accompagne les acteurs de la sécurité nationale, de la défense et de l’administration fédérale. CACI propose des solutions dans les domaines des opérations cyber et digitales, de la modernisation de l’IT d’entreprise, de la guerre électronique, des systèmes de lutte contre les systèmes sans équipage (C-UxS), des communications spatiales et optiques, du développement logiciel agile en DevSecOps, ainsi que de l’ingénierie de mission et du soutien logistique. L’entreprise se positionne comme un grand contractant principal qui s’appuie sur des logiciels, des outils d’analytique, des technologies de détection et du hardware avancés pour identifier et contrer l’évolution des menaces et moderniser les architectures technologiques gouvernementales.

Description

• Serve as the senior technical authority for penetration testing and red-team delivery across the RFS portfolio • Define and mature assessment standards, rules-of-engagement patterns, technical review gates, evidence requirements, severity methodology, reporting expectations, and reusable playbooks • Review and approve engagement plans, adversary scenarios, infrastructure designs, tooling exceptions, exploitation approaches, data-handling controls, and high-risk technical actions • Guide the technical team, assign scarce specialties, mentor staff, conduct technical readiness reviews, and resolve complex cross-domain problems • Provide hands-on support for network, application, Active Directory/identity, cloud, exploit-development, adversary-infrastructure, and defense-evasion challenges • Own final technical quality and acceptance for assessment reports, attack-path narratives, severity decisions, remediation recommendations, customer out-briefs, and purple-team scenarios • Lead technical customer discussions and communicate mission and business risk • Coordinate with project management on schedule, staffing, dependencies, and issue escalation without assuming administrative PM ownership • Capture lessons learned, measure technical quality and repeatability, and evolve the capability as customer processes and tools become known • Support the CDM Program’s mission to safeguard and secure U.S. Federal IT networks through continuous monitoring, diagnosis, and mitigation services

🎯 Exigences

• U.S. citizenship is required • Eligibility for access to sensitive information and ability to obtain a Public Trust fitness determination (High Risk) • Ability to work in customer-provided remote environments and comply with rules of engagement, data-handling requirements, evidence controls, deconfliction procedures, and stop-work criteria • Eight or more years of progressively responsible offensive-security experience, including significant hands-on penetration testing and red-team/adversary-emulation delivery • Five or more years leading complex technical engagements, multiple concurrent assessments, or senior offensive-security teams • Expert ability to scope and govern safe testing across enterprise networks, applications/APIs, Windows/Active Directory and identity, Linux, AWS/Azure, external attack surfaces, and production environments • Demonstrated technical authority in rules of engagement, operational risk, deconfliction, exploit validation, evidence quality, severity decisions, report acceptance, and customer out-briefing • Strong scripting, automation, or tool-development capability • One or more advanced hands-on certifications such as OSEP/OSCE, OSWE, GXPN, GPEN, OSED/OSEE, CRTO/CRTL, or equivalent expert-level experience • Twelve or more years across offensive security, security research, adversary emulation, or technical-assessment leadership (desired) • Experience leading CISA, DHS, federal high-value-asset, critical-infrastructure, ICS/OT, or similarly sensitive assessment programs (desired) • Experience maturing an offensive-security program, establishing quality metrics, developing training, or building repeatable technical delivery standards (desired) • Advanced cloud, identity, exploit-development, malware/payload, detection-engineering, or purple-team expertise (desired) • Ability to brief senior government leadership and translate technical attack paths into operational and mission risk (desired)

🏖️ Avantages

• Unique flexible time off benefit • Robust learning resources • Healthcare benefits • Wellness benefits • Financial benefits • Retirement benefits • Family support benefits • Continuing education benefits • Time off benefits • Flexible work-life balance

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV