Cybersecurity Exploit Developer

WHO WE ARE:

Electronic Warfare Associates (EWA) is a global company offering a wide variety of technology, products, and services in niche markets. EWA provides engineering products and services to government and commercial markets in cyber defense, radar development, intelligence, security, training, tactical mission planning, information management, and force protection. The Cyber Security Exploit Developer will support EWA Warrior Services an EWA subsidiary located in Huntsville, Alabama. Warrior Services is a strategic office providing mission ready satellite and space services for our armed forces.

POSITION SUMMARY:

As part of an industry leading cyber defense assessment team, develop and create tools and means to demonstrate penetration and exploitation techniques of computer networks. Operationalize tool capabilities to defeat current and emerging exploit mitigation techniques, bypass or evade defensive tools and maintain a covert presence within a network. Responsible for ensuring end-to-end functionality of the tools and making sure they are robust and ready for training and exercise support.

ROLE AND RESPONSIBILITIES:

• Analyze and extrapolate from the latest Cyber threat intelligence new and evolving attack techniques
• Develop tools to emulate effects of cyber-attacks for training
• Develop usable exploits and implants
• Design and develop remote access capabilities to use during training exercises and tests
• Design and develop obscured communication and control channels
• Conduct end-to-end testing of attack tools to ensure intended functionality while evading defensive tools
• Collaborate with a team of experienced developers to create usable and robust attack tools
• Collaborate across Cybersecurity professionals and similar teams to prioritize the development for the systems of interest
• Exploit common vulnerabilities and misconfigurations associated with common operating systems (Windows, Linux, etc.), protocols (HTTP, FTP, etc.), and network security services (PKI, HTTPS, etc.)

MINUMUM REQUIREMENTS:

• 5+ years' experience in exploit development, reverse engineering, red team capabilities and engineering.
• Knowledge of development programming languages (e.g., Python, C (+variants), .Net, Perl, PHP, JavaScript, Ruby.
• Knowledge of Web Server configurations (e.g., Apache HTTP Server, Apache Tomcat, Microsoft IIS.)
• Planning and execution experience with technical cyber assessments or penetration tests.
• Experience with developing and using testing methodology for cloud-based and networked systems.
• Experience modifying, testing and use of computer network attack and exploitation tools.

Certifications:

• Certified Ethical Hacker (CEH) and Security + or higher
• Certification and two of technical certifications from the following list:
  1. Web Application Penetration Tester (WAPT)
  2. GIAC Web Application Penetration Tester (GWAPT)
  3. GIAC Penetration Tester (GPEN)
  4. Cisco Certified Network Associate (CCNA)
  5. Offensive Security Certified Professional (OSCP)
  6. Offensive Security Certified Expert (OSCE)

PREFERRED SKILLS:

• Experience with examining various cyber threat TTPs, organizational structures, capabilities, personas, and environments, and integrate findings into penetration tests or exercises.
• Ability to design, build, and implement software, Cyber assessment tools, information assurance products, or computer security applications, preferred
• Experience with computer network or system design and implementation preferred
• Employment contingent on customer acceptance of resume and qualifications.
• Knowledge of virtualization technology (VMWare, VirtualBox, etc.)

*U.S. Citizenship Required. The ability to obtain and maintain a U.S. security clearance is required. *