Cyber Security Engineer – Penetration Tester (Journeyman)

OneZero Solutions supports the U.S. Coast Guard with cyber defense initiatives through hands-on penetration testing and adversary emulation. This journeyman-level role (Washington, DC hybrid) helps strengthen operational cyber security by delivering practical assessments, actionable reporting, and training support for DoD Cyber Protection Teams.

Responsibilities

• Assess the cyber security posture of Coast Guard operational networks through adversary emulation.
• Conduct red team operations, penetration tests, and phishing assessments.
• Perform cyber threat emulation during scripted exercises to train DoD Cyber Protection Teams.
• Deploy, configure, and operate Command and Control (C2) frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.
• Apply tactics, techniques, and procedures (TTPs) covering initial access, lateral movement, privilege escalation, persistence, and data exfiltration.
• Use proprietary and open-source offensive security tool sets effectively to achieve engagement objectives.
• Monitor, manage, and maintain the cloud and on-premise infrastructure used during assessments.
• Use Git repositories to maintain operational tools and scripts.
• Execute internal and external penetration testing, including network mapping and enumeration.
• Assess web and mobile applications and perform database scans.
• Assess Active Directory attack paths using tools such as BloodHound.
• Develop reports and briefs detailing findings and recommendations for completed assessments.

Requirements

• 2 to 3 years of relevant experience (minimum 2 years).
• Active Top Secret security clearance with SCI eligibility.
• Hands-on experience with computers and network security.
• Experience conducting phishing campaigns or social engineering.
• Hands-on experience with red team tasks and penetration testing.
• Familiarity with malware development and EDR/AV bypass strategies.
• Experience with PowerShell, C, C++, or Python.
• Hands-on experience using C2 frameworks such as Cobalt Strike, Sliver, Havoc, or similar.
• Bachelor’s degree (BA/BS) or equivalent years of relevant experience.

Technologies

• Cobalt Strike, Havoc, Mythic, Sliver
• Git, BloodHound
• PowerShell, C, C++, Python
• EDR/AV

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Life insurance
• 401(k) with company matching
• Paid time off and holidays
• Employee referral program
• Educational assistance

Security Clearance

• Top Secret

Preferred Qualifications

• Experience supporting Red Team or offensive cybersecurity operations.
• Experience with web application, network, wireless, cloud, or infrastructure penetration testing.
• Familiarity with tools such as Nmap, Burp Suite, Metasploit, BloodHound, Wireshark, or similar.
• Knowledge of common attack frameworks and methodologies, including MITRE ATT&CK.
• Experience developing penetration testing reports and presenting technical findings.
• Active industry-recognized cybersecurity certifications such as OSCP, CEH, PenTest+, GPEN, or comparable certifications.

Certifications

Candidates must hold a DoD 8570/8140-compliant Information Assurance Technical (IAT) Level II or Level III certification, along with an offensive security certification.

• Offensive Security Certification (any one): GIAC Penetration Tester (GPEN); Red Team Apprentice Course (RTAC); or equivalent
• IAT Level II (any one, or one of the IAT Level III certifications noted below): CompTIA Security+ CE; CompTIA CySA+; CCNA Security; GICSP; GSEC; SSCP
• IAT Level III (any one): CompTIA CASP+ CE (SecurityX); CISSP (or Associate); CISA; CCNP Security; GCED; GCIH