Senior Development Tester, CI/ID (onsite) Cyber Security

Position Description

Join the Defense Threat Reduction Agency (DTRA) as a member of the elite DoD Red Team's newest component, the DTRA Cyber Assessment Red Team (DCART), where you will be at the forefront of assessing vulnerabilities and identifying risks to critical assets and missions. You will challenge protection strategies from an adversarial perspective, providing invaluable insights that drive mission assurance and be key to safeguarding our nation's security.

You will collaborate with top-tier DoD stakeholders, including the Joint Chiefs of Staff and Combatant Commanders, to deliver actionable intelligence that enhances our defense capabilities. Your work will involve both analytical and physical assessments, as well as contributing to the cutting-edge DTRA Cyber Assessment Red Team (DCART). By conducting comprehensive cyber assessments, you will help create a holistic view of adversarial threats, ensuring our national security remains robust and resilient.

This is your chance to make a tangible impact on national defense, working alongside dedicated professionals to prevent, protect, and mitigate threats to our nation's most critical operations. Join us and be part of a mission that truly matters.

May travel to support assessments CONUS and OCONUS (anticipated ~15%). Must be able to support assessments during non-standard duty hours, to include nights and weekends.

Job Description: The Senior Development Tester must have 3+ years' experience in software analysis, test, and evaluation, which may be described as any activities to characterize, profile, and/or validate software such as: source code review/analysis, dynamic/performance testing and evaluation, algorithm assessment, or open-source research on cyber-related vulnerabilities and exploitation development. They should have experience with modern programming languages such as: C, C++, C#, or Java.

• 5+ years' experience in software analysis, test, and evaluation
• Experience with mission-driven rapid development in support of cyber operations
• An expert understanding of red teaming or offensive cyber activities and attack methodologies that underpin tool requirements
• Experience with cyber red team or offensive cyber development, primarily focused on post-exploitation tools and defense evasion
• Comprehensive understanding of Win32APIs
• Experience in DevSecOps principles and familiarity with automated code testing and CI/CD pipelines
• Ability to implement/maintain developer infrastructure, including diagnosing/remediating issues as they arise. Developer infrastructure concepts include but are not limited to: VPN, DNS, DHCP, LDAP, VM hypervisors (ESXi, Proxmox), artifact repositories (Nexus)
• Certifications focused on advanced offensive tool development or advanced exploit development
• Familiarity with C2 platforms (e.g. Cobalt Strike)
• Experience in developing red team tooling at the kernel level in Windows
• Top Secret SCI Clearance