Today
Top Secret/SCI
Mid Level Career (5+ yrs experience)
$200,000 - $240,000
Occasional travel
IT - Security
Fort Meade, MD (On-Site/Office)
BreakPoint Labs is seeking a Software Developer to provide expert software development support to create, maintain, and enhance cyberspace capabilities in Ft. Meade, Maryland. This role covers the entire software development lifecycle for both traditional (implants, exploits) and non-traditional capabilities.
Responsibilities include:
- Execute all phases of the SDLC, including planning, requirements management, risk management, design, development, architecture, modeling, estimation, documentation, configuration management, quality assurance, security, and testing.
- Design and implement software architectures, including microservices, monolithic, and event-driven systems.
- Write, test, and refine code in various programming languages.
- Implement secure coding practices to prevent common vulnerabilities in developed code.
- Conduct vulnerability assessments (static and dynamic analysis) against developed applications.
- Generate and review operational and procedural scripts.
- Integrate developed capabilities with USCYBERCOM common services.
- Develop and refine cyberspace tradecraft and Tactics, Techniques, and Procedures (TTPs).
- Perform research, development, and maintenance of implants and exploits, and novel, non-traditional cyberspace capabilities.
Required Experience:
Programming Languages: Expertise in multiple programming languages (C, C++, Python, Java, JavaScript, Bash/Bourne/C Shell, Rust, and assembly (x86/x64, ARM, MIPS)).
Operating Systems: In-depth knowledge of Windows internals (WinAPI, kernel structures), Linux/Unix internals (kernel modules, syscalls), macOS (XNU kernel), Android, and iOS for low-level development.
Networking: Experience with network stacks, protocols, and devices.
Development Tools: Familiarity with Gnu Debugger (GDB), Valgrind, Low Level Debugger (LLDB), IDA Pro, Ghidra, SCons, Visual Studio, Binary Ninja, and Git. Experience performing static and dynamic analysis (SAST/DAST) as part of the SDLC.
Cloud Platforms: Experience with core services (Compute, Storage, Identity) on Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP).
Container Technologies: Experience working with containerization technologies such as Docker, docker compose, and/or Kubernetes.
Core Skills: Ability to analyze and reverse engineer source code, perform software integration, and generate technical documentation.
Exploit Development: Experience developing Remote/Sandbox exploits. In depth knowledge of exploit mitigations such as ASLR and DEP, and experience with techniques such as ROP and Vectored Exception Handlers/Structured Exception Handlers (VEH/SEH).
Certifications Required: GSEC, CCSLP, CISSP-ISSAP
Security Clearance Required: Top Secret/SCI with CI Poly
Education Required: Level Bachelor’s Degree; Area(s) of Study Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, Software Engineering
Responsibilities include:
- Execute all phases of the SDLC, including planning, requirements management, risk management, design, development, architecture, modeling, estimation, documentation, configuration management, quality assurance, security, and testing.
- Design and implement software architectures, including microservices, monolithic, and event-driven systems.
- Write, test, and refine code in various programming languages.
- Implement secure coding practices to prevent common vulnerabilities in developed code.
- Conduct vulnerability assessments (static and dynamic analysis) against developed applications.
- Generate and review operational and procedural scripts.
- Integrate developed capabilities with USCYBERCOM common services.
- Develop and refine cyberspace tradecraft and Tactics, Techniques, and Procedures (TTPs).
- Perform research, development, and maintenance of implants and exploits, and novel, non-traditional cyberspace capabilities.
Required Experience:
Programming Languages: Expertise in multiple programming languages (C, C++, Python, Java, JavaScript, Bash/Bourne/C Shell, Rust, and assembly (x86/x64, ARM, MIPS)).
Operating Systems: In-depth knowledge of Windows internals (WinAPI, kernel structures), Linux/Unix internals (kernel modules, syscalls), macOS (XNU kernel), Android, and iOS for low-level development.
Networking: Experience with network stacks, protocols, and devices.
Development Tools: Familiarity with Gnu Debugger (GDB), Valgrind, Low Level Debugger (LLDB), IDA Pro, Ghidra, SCons, Visual Studio, Binary Ninja, and Git. Experience performing static and dynamic analysis (SAST/DAST) as part of the SDLC.
Cloud Platforms: Experience with core services (Compute, Storage, Identity) on Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP).
Container Technologies: Experience working with containerization technologies such as Docker, docker compose, and/or Kubernetes.
Core Skills: Ability to analyze and reverse engineer source code, perform software integration, and generate technical documentation.
Exploit Development: Experience developing Remote/Sandbox exploits. In depth knowledge of exploit mitigations such as ASLR and DEP, and experience with techniques such as ROP and Vectored Exception Handlers/Structured Exception Handlers (VEH/SEH).
Certifications Required: GSEC, CCSLP, CISSP-ISSAP
Security Clearance Required: Top Secret/SCI with CI Poly
Education Required: Level Bachelor’s Degree; Area(s) of Study Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, Software Engineering
group id: 90987816
