Cybersecurity Practitioner
Core
Evaluate and verify third-party software deliverables, assess technical compliance reports, and provide risk-mitigation recommendations for IT and OT systems using NIST RMF.
Role type
Senior IC cybersecurity practitioner (software assurance & reverse engineering)
Builds
Production security testing tools, CONMON artifacts, and visual metrics for system security engineering
Domain
Defense/IT & OT systems security
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Static Application Security Testing (SAST), static binary analysis, software reverse engineering, secure coding practices, risk management methodologies, DEVSECOPS, custom utility development, log consolidation, SCAP result analysis
Preferred skills
ICS/SCADA systems support, vulnerability hunting, threat analysis, hardware debugging (JTAG, UART, I2C), Ghidra, Binwalk
Technologies
NIST RMF, SCAP, Ghidra, Binwalk, JTAG, UART, I2C
Responsibilities
Conduct SAST on source code and static binary analysis on compiled executables; reverse engineer commercial and custom software to identify flaws; develop custom software utilities to gather system information and generate CONMON artifacts; assess scan reports to identify weaknesses and prioritize mitigation plans; maintain security testing tools.
Seniority
Senior, hands-on IC