The Opportunity
The Junior Offensive Cyber Security Specialist supports cybersecurity assessments of organizational and third-party environments by applying strong foundational networking knowledge to evaluate technology architecture, web applications, and security controls, with a primary focus on passive reconnaissance, threat hunting, and corporate intelligence gathering. This role requires the ability to systematically map an organization's attack surface, identify potential vulnerabilities and exposure points, and assess associated risk while safely and responsibly handling any sensitive or confidential information encountered during the course of this work
Key Responsibilities (Principal Duties and Accountabilities *Essential Functions)
Working under the guidance of senior team members, this role performs core cybersecurity activities including:
- Passive Reconnaissance - Gathering intelligence on target environments without direct interaction, leveraging OSINT techniques and other open-source resources to build a comprehensive picture of an organization's cyber posture and external footprint
- Attack Surface Mapping - Identifying and cataloging externally facing assets, subdomains, exposed services, and technology stacks to support broader risk assessment efforts
- Threat Hunting - Proactively identifying indicators of compromise, adversary tactics, and potential threats within client environments
- Corporate Intelligence Gathering - Researching organizational relationships, business dealings, and publicly available information to inform risk context and support adversary emulation efforts
- Incident Analysis - Supporting the review and analysis of security incidents to identify root causes and contributing factors
Requirements
- Fluency in English (written and spoken)
- The ability to obtain Secret or higher security clearance; preference will be given to candidates with active Secret or higher security clearance
Education
- Bachelor's degree in Cybersecurity or related field preferred; equivalent professional experience or relevant industry certifications may be considered in lieu of a degree
Required Skills, Experience & Abilities
- 1-3 years of professional cybersecurity experience
- 1-2 years of practical experience in conducting penetration tests, red team operations, or cyber-threat intelligence.
- Strong knowledge of networking fundamentals, reconnaissance techniques, and open-source tools, with hands-on proficiency in web enumeration to effectively map an application's attack surface.
- Maintain strict OPSEC awareness throughout all engagement activities, exercising sound judgment and discretion when encountering sensitive, confidential, or out-of-scope information; demonstrate trustworthiness in safeguarding such data in accordance with client confidentiality agreements and applicable data protection standards.
- Exceptional communication, presentation, and team-building skills, paired with demonstrated trustworthiness and responsible professional conduct
Preferred Qualifications
- Intermediate to advanced certifications in offensive cyber operations preferred (OSCP, CRTO, GPEN, PNPT, etc.)
Physical Demands & Work Environment The physical demands and work environment described are representative of those that an employee encounters while performing the essential functions of this job.
- Prolonged periods of sitting at a desk and working on a computer.
- Ability to lift up to 50 lbs. and work in austere field conditions.
- Ability to lift up to 15 pounds on occasion (e.g., transporting laptop, presentation materials, or small equipment).
- Ability to perform computer-based tasks, including typing, preparing documents, and entering information, with or without reasonable accommodation.
- Ability to effectively participate in meetings, presentations, and verbal or written communications, with or without reasonable accommodation
- Ability to travel domestically and internationally up to 25% of the time, which may include extended periods of standing, walking, or navigating airports and government facilities.
- Ability to sit or stand for long periods of time.
- The noise level in the work environment is usually moderate.
- Professional office environment with standard office equipment (computers, phones, printers).
- Frequent interaction with clients, executives, and government officials in both in-person and virtual settings.
- Regular travel to customer sites, government facilities, and industry events.
- Fast-paced, deadline-driven environment requiring adaptability and responsiveness.
- Work may occasionally be performed in secure government facilities, requiring adherence to security protocols.
- This position may involve OCONUS travel for short periods of time.