Nmap

Nmap Engineer Jobs

5 jobs found

2d ago

Information Systems Security Engineer - Senior

Praescient Analytics Washington, DC

Washington, DC

2d ago

Full time Senior Centralized Logging Cyber Security

Apply Now

Job Description

The Senior Information Systems Security Engineer will support an Information Security as a Service (ISaaS) program for a federal law enforcement agency. This role focuses on integrating technical security configurations into planned solutions, engineering cloud-based architectures, and executing NIST RMF to support timely system authorizations.

Responsibilities

Act as a principal technical advisor for cybersecurity architecture, integrating technical security configurations into planned solutions.
Collaborate with technical teams to build required security configurations, including Multi-Factor Authentication (MFA), centralized logging, and vulnerability remediation.
Provide technical input for development of the System Security Plan (SSP), ensuring data flows align with least privilege principles.
Create technically grounded remediation approaches for control gaps identified through self-assessments.

Requirements

At least 8 years of experience in secure design, analysis, and testing of information security systems.
8+ years of experience applying federal methods and standards to ensure security safeguards are properly documented.
8+ years of experience creating and updating security test plans to detect and mitigate risks.
Documented leadership experience supervising teams of IT or security professionals.
Active TS/SCI Clearance (Polygraph required post-hire).
US citizenship required.
Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.
Must hold at least one of the following active certifications: CISSP or CEH.

Technologies

Multi-Factor Authentication (MFA)
Centralized logging
NIST Risk Management Framework (RMF)
Tenable Nessus
Splunk
IBM Guardium
HP WebInspect
NMAP
System Security Plan (SSP)
Least privilege principles

Preferred Qualifications

Active Cloud Security certification.
Experience with cloud technologies, enterprise architecture, and emerging technical environments.
Familiarity with enterprise tools including Tenable Nessus, Splunk, IBM Guardium, HP WebInspect, and NMAP.

Benefits

Competitive salary based on qualifications and experience.
Comprehensive, company-paid healthcare (premiums and deductibles covered).
401(k) with company match.
Travel and performance incentives.
3 weeks paid time off (plus Federal Holidays).
$5K annual training allowance.
$500 book allowance.
Tuition reimbursement program.

Location and Clearance

Location: Washington, DC Metro Area (onsite).

Clearance: Top Secret (TS) / SCI Eligible (Polygraph required post-hire).

Position Type

Full-Time

View full job page →

1mo ago

Security Engineer III, Red Team Operator

Deloitte Rosslyn, VA

Rosslyn, VA

1mo ago Closed

$89k - $163k/yr Full time Active Directory Burp Suite Cloud Platforms

This position is no longer accepting applications (closed Sep 26, 2026).

Job Description

Deloitte is seeking a Red Team Operator to support authorized adversary emulation and penetration testing activities with the goal of strengthening enterprise detection, response, and resilience. This onsite role in Rosslyn, VA focuses on realistic threat simulations across modern IT environments, followed by clear reporting and collaboration with security teams.

The position is aligned to a senior security engineering track and requires an active Top-Secret Clearance, along with experience planning and executing red team operations in a controlled, legally compliant setting.

Location and compensation

Location: Rosslyn, VA (onsite)
Salary: USD 88,800 - 162,800 per year
Work model: onsite up to 5 days a week
Travel: 20% on average

What you will do

Plan and execute red team operations across enterprise environments, web applications, cloud platforms, and endpoints.
Emulate advanced threat actors using realistic attack paths, tools, and techniques.
Run simulations for reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration.
Evaluate the effectiveness of security controls, monitoring, and incident response processes.
Conduct phishing and other social engineering and credential attack exercises when authorized.
Develop custom payloads, scripts, and attack workflows to support engagements.
Document findings, attack chains, gaps in defenses, and recommendations for remediation.
Provide after-action reports and debriefs to technical and leadership stakeholders.
Collaborate with blue teams, detection engineers, and security leadership to improve defensive capabilities.
Maintain strict adherence to rules of engagement, legal requirements, and operational safety.

Required qualifications

Education: Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
Clearance: Active Top-Secret Clearance.
Experience: 1+ years within offensive security and adversary simulation activities.
Knowledge of network architecture, protocols, and techniques such as tunneling.
Hands-on experience in red teaming, purple teaming, or adversary simulation.
Strong knowledge of enterprise attack techniques across Windows, Active Directory, Linux, cloud, and identity environments.
Experience with command and control frameworks, privilege escalation, lateral movement, and evasion techniques.
Proficiency with tools including Cobalt Strike, Mythic, Metasploit, BloodHound, Burp Suite, Nmap, and PowerShell or Python.
Experience mapping activity to MITRE ATT&CK and performing threat emulation.
Ability to write high-quality reports connecting technical findings to business risk.
Ability to travel 20% on average.
Must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Technology focus

Cobalt Strike, Mythic, Metasploit
BloodHound, Burp Suite, Nmap
PowerShell, Python
MITRE ATT&CK
Windows, Active Directory, Linux
Cloud and identity environments
Command and control frameworks

Incentive program

You may be eligible to participate in a discretionary annual incentive program, subject to program rules and dependent on factors including individual and organizational performance.

Preferred qualifications

Certified Red Team Operator (CRTO) or Offensive Security Certified Professional (OSCP).
Experience with C2 frameworks such as Cobalt Strike, Havoc, Mythic, Sliver.
Experience with cloud red teaming in AWS, Azure, or GCP.
Familiarity with detection engineering, SIEM, EDR, and purple team exercises.
Experience developing custom tooling or modifying public offensive tools.
Knowledge of malware analysis, reverse engineering, or exploit development.

View full job page →

1mo ago

Security Engineer III, Red Team Operator

Deloitte Rosslyn, VA

Rosslyn, VA

1mo ago Closed

$111k - $218k/yr Full time Active Directory Bloodhound Burp Suite

This position is no longer accepting applications (closed Sep 25, 2026).

Job Description

Deloitte is seeking a Red Team Operator for the Cyber Defense & Resilience team. This onsite role in Rosslyn, VA focuses on improving real-world security outcomes through controlled adversary emulation, engagement execution, and actionable reporting that supports stronger detection, response, and resilience.

What you’ll do

Plan and execute red team operations against enterprise environments, web applications, cloud platforms, and endpoints.
Emulate advanced threat actors with realistic attack paths, tools, and techniques.
Run simulations across reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration.
Evaluate the effectiveness of security controls, monitoring, and incident response processes.
Perform authorized phishing, social engineering, and credential attack exercises.
Develop custom payloads, scripts, and attack workflows to support engagement objectives.
Document findings, attack chains, gaps in defenses, and recommendations for remediation.
Provide clear after-action reports and debriefs to technical and leadership stakeholders.
Partner with blue teams, detection engineers, and security leadership to improve defensive capabilities.
Maintain strict adherence to rules of engagement, legal requirements, and operational safety.

Required qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field.
Active Top-Secret Clearance.
Ability to work onsite up to 5 days a week.
Knowledge of network architecture, protocols, and techniques (for example, tunneling).
Hands-on offensive security experience in red teaming, purple teaming, or adversary simulation.
Strong knowledge of enterprise attack techniques across Windows, Active Directory, Linux, cloud, and identity environments.
Experience with command and control frameworks, privilege escalation, lateral movement, and evasion techniques.
Proficiency with tools including Cobalt Strike, Mythic, Metasploit, BloodHound, Burp Suite, Nmap, and PowerShell or Python.
Experience with MITRE ATT&CK mapping and threat emulation.
Ability to write high-quality reports connecting technical findings to business risk.
Certified Red Team Operator (CRTO) or Offensive Security Certified Professional (OSCP).
Ability to travel 20% on average, based on work, clients, and industries/sectors.
Legally authorized to work in the United States without employer sponsorship, now or in the future.
Ability to work independently and collaborate in a team, with effective written and verbal communication.
Meticulous attention to detail and quality of work product, including meeting deadlines.
Ability to build and sustain professional relationships, manage priorities, and provide clear guidance to others.

Preferred qualifications

Experience with C2 frameworks such as Cobalt Strike, Havoc, Mythic, or Sliver.
Experience with cloud red teaming in AWS, Azure, or GCP.
Familiarity with detection engineering, SIEM, EDR, and purple team exercises.
Experience developing custom tooling or modifying public offensive tools.
Knowledge of malware analysis, reverse engineering, or exploit development.

Tools and technologies

Cobalt Strike, Mythic, Metasploit, BloodHound, Burp Suite, Nmap, PowerShell, Python, MITRE ATT&CK
Active Directory, Windows, Linux, C2 frameworks
Havoc, Sliver, AWS, Azure, GCP, SIEM, EDR

Location, clearance, and compensation

Location: Rosslyn, VA (onsite). Salary range: USD 110,700 - 218,300 per year. Compensation reflects a wide range of factors used to make compensation decisions.

Minimum experience: 2 years.

View full job page →

1mo ago

Information System Security Engineer

MANTECH Washington, DC

Washington, DC

1mo ago Closed

Full time Authorization To Operate Cybersecurity Tools Ibm Guardium

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

MANTECH is seeking an Information System Security Engineer (ISSE) to help identify, design, and implement cybersecurity requirements for an IS and Network Environment. This role focuses on translating applicable security needs into architectures, security measures, and implementable designs, while supporting mission outcomes in a networked environment.

The position is based in Washington, DC and is onsite. The work requires a current/active Top Secret clearance with SCI eligibility, along with willingness to complete a polygraph.

Responsibilities

Identify information protection needs for an IS and Network Environment, and define IS and network security requirements in line with applicable cybersecurity requirements.
Design security architectures for use within the IS and Network Environment, including cybersecurity-enabled products that support those environments.
Integrate and/or implement security with Cross Domain Solutions (CDS) for use within an IS and Network Environment.
Develop and implement security designs for new or existing network system(s), ensuring hardware, operating systems, and software applications address cybersecurity requirements.
Design, develop, and implement network security measures to provide confidentiality, integrity, availability, authentication, and non-repudiation, including cybersecurity countermeasures for the IS and Network Environment.
Develop interface specifications for the IS and Network Environment.
Develop approaches to mitigate IS and Network Environment vulnerabilities and recommend changes to network or network system components as needed.
Ensure that network system(s) designs support incorporation of FBI directed cybersecurity vulnerability solutions.

Requirements

Experience level requirement (must meet one): High school diploma/GED and 14 years, Associate’s degree and 7 years, Bachelor’s degree and five years, or Master’s degree and 3 years.
Hold at least one of the following certifications: CISSP (or Associate), CompTIA Advanced Security Practitioner (CASP) CE, CSSLP, CISSP-ISSEP, or CISSP-ISSAP.
Familiarity with security tools and usage, including Tenable Nessus and/or Security Center, IBM Guardium, HP WeblInspect, Network Mapper (NMAP), or similar applications.
Working knowledge of NIST Risk Management Framework (RMF) and ATO processes.
Must have a current/active Top Secret security clearance with eligibility to obtain SCI prior to starting.
Selected candidate must be willing to undergo a Polygraph.

Technologies

Cross Domain Solutions (CDS)
Tenable Nessus
Security Center
IBM Guardium
HP WeblInspect
Network Mapper (NMAP)
NIST Risk Management Framework (RMF)
ATO processes

Preferred Qualifications

Degree in Computer Science, Cybersecurity, or other cyber discipline.

Physical Requirements

Must be able to remain in a stationary position 50%.
Needs to occasionally move about inside the office to access file cabinets, office machinery, and related materials.
Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine, and computer printer.
Often positions self to maintain computers in the lab, including under desks and in the server closet.
Frequently communicates with co-workers, management, and customers, which may involve delivering presentations; must be able to exchange accurate information in these situations.

View full job page →

2mo ago

Junior Penetration Tester - Cyber Engineer

CACI Aberdeen, MD

Aberdeen, MD

2mo ago Closed

$76k - $156k/yr Full time Bash Burp Suite Cybersecurity Tools

This position is no longer accepting applications (closed Aug 24, 2026).

Job Description

At CACI, a Junior Penetration Tester - Cyber Engineer will join an on-site team at Aberdeen Proving Ground, MD, applying penetration testing and threat-hunting to assess sophisticated systems. The role requires an active Secret clearance and sits within a collaborative engineering environment focused on mission-critical work.

Responsibilities

Join a diverse, high-performing engineering team united by solving real-world problems.
As a junior penetration tester, work hands-on with cutting-edge technology and the latest electronics.
Conduct in-depth assessments and analyses of complex systems using penetration testing and threat-hunting techniques.

Requirements

Active Secret Clearance with potential to obtain TS/SCI
Bachelor's degree in a related field and 3 years of relevant experience
Foundational understanding of Linux operating systems and commands
Knowledge of cybersecurity concepts such as the CIA triad, common cyber threats, and cyber defense mechanisms
Strong grasp of networking, TCP/IP, virtualization, containerization, and web services
Familiarity with OWASP Top 10, DoD, NSA, or industry-standard Vulnerability and Penetration Testing Standards
Working knowledge of popular penetration testing tools such as nmap, Wireshark, Burp Suite, Nessus, and similar utilities
1-2 years of exploitation experience

Technologies

nmap
Wireshark
Burp Suite
Nessus
Bash
Python
Perl
Ruby
Linux
Android

Benefits

Healthcare
Wellness programs
Financial benefits
Retirement benefits
Family support
Continuing education
Time off benefits
Flexible time off
Learning resources

What You Can Expect

A culture of integrity guides all work at CACI. Character and innovation are central to daily operations, and you will be part of a high-performing team dedicated to our customers' missions and the safety of our nation.

An environment of trust is fostered by valuing the unique contributions of every employee. You will have autonomy through a flexible time off benefit and access to robust learning resources to support your goals.

A focus on continuous growth accompanies opportunities to advance national missions, build on a long history of success, and push boundaries in your career and the organization’s legacy.

Pay Range

USD 76,000 - 155,700 per year

View full job page →

Nmap Engineer Jobs

Information Systems Security Engineer - Senior

Security Engineer III, Red Team Operator

Security Engineer III, Red Team Operator

Information System Security Engineer

Junior Penetration Tester - Cyber Engineer

Get Nmap Engineer Jobs alerts