Job Requirements
Remote Orlando, FL
Top Secret/SCI Polygraph not specified
Senior Level Career (10+ yrs experience)
$160,000 - $175,000
Job Description
Cybersecurity Engineer Principal
The Cybersecurity Engineer Principal is the senior penetration tester and red team lead for a boutique security assessment practice delivering red, blue, and purple team engagements to commercial and government clients. This is a hands-on technical lead seat that owns engagements end to end, from scoping and rules of engagement through testing, reporting, client briefings, and remediation validation. You start as an individual contributor reporting to the CEO, then recruit, develop, and lead the assessment team as it grows. Most of the work supports the commercial practice, with periodic surge support on cleared government engagements.
Target Compensation: $160,000 to $175,000 base
Logistics: Remote (US) with onsite work in Orlando, FL, up to five business days per month
Here's what you'll be doing:
• Lead penetration tests and red team operations across networks, web applications, APIs, cloud platforms, identity systems, and wireless
• Scope engagements, set rules of engagement, and estimate level of effort, staffing, and delivery timelines
• Build realistic attack scenarios, validate vulnerabilities, and demonstrate attack paths and business impact within approved boundaries
• Run blue and purple team assessments alongside client and internal defenders to measure control effectiveness, detection coverage, and response, then drive practical improvements
• Build and maintain red team infrastructure, custom tooling, scripts, and testing methodology
• Write and review evidence-backed reports, escalate critical findings in real time, and brief both technical teams and executives
• Validate client remediation after fixes land
• Mentor operators, support hiring, and grow into managing the assessment team
• Provide periodic surge support on government engagements requiring TS/SCI
And what you need to have:
• 10+ years in cybersecurity, including substantial hands-on penetration testing and demonstrated red team leadership
• Top Secret clearance with SCI eligibility (no polygraph required)
• Bachelor's degree in cybersecurity, computer science, IT, or a related field, or equivalent experience
• Hands-on testing across network, web application, API, cloud, identity, and wireless
• Deep knowledge of Windows, Linux, Active Directory, networking protocols, authentication, and access controls
• Cloud and hybrid environment assessments
• Scripting and tool development in Python, PowerShell, and Bash
• Building and maintaining red team infrastructure and assessment tooling
• Working knowledge of the OWASP Testing Guide, MITRE ATT&CK, and established penetration testing methodologies
• Partnering with defensive teams to test detection and response capabilities
• Strong technical writing, client communication, and executive presentation skills
• Ability to scope effort, manage competing engagement priorities, and deliver independently
• Bonus points: OSCP, OSEP, OSWE, CRTO, CISSP, or CEH; master's degree in a related field; consulting or boutique firm experience across concurrent clients; mixed commercial and government delivery; experience building an assessment practice or managing pentesters and red team operators
• Bonus points: advanced depth in adversary emulation, application security, cloud exploitation, exploit development, or detection engineering
The Cybersecurity Engineer Principal is the senior penetration tester and red team lead for a boutique security assessment practice delivering red, blue, and purple team engagements to commercial and government clients. This is a hands-on technical lead seat that owns engagements end to end, from scoping and rules of engagement through testing, reporting, client briefings, and remediation validation. You start as an individual contributor reporting to the CEO, then recruit, develop, and lead the assessment team as it grows. Most of the work supports the commercial practice, with periodic surge support on cleared government engagements.
Target Compensation: $160,000 to $175,000 base
Logistics: Remote (US) with onsite work in Orlando, FL, up to five business days per month
Here's what you'll be doing:
• Lead penetration tests and red team operations across networks, web applications, APIs, cloud platforms, identity systems, and wireless
• Scope engagements, set rules of engagement, and estimate level of effort, staffing, and delivery timelines
• Build realistic attack scenarios, validate vulnerabilities, and demonstrate attack paths and business impact within approved boundaries
• Run blue and purple team assessments alongside client and internal defenders to measure control effectiveness, detection coverage, and response, then drive practical improvements
• Build and maintain red team infrastructure, custom tooling, scripts, and testing methodology
• Write and review evidence-backed reports, escalate critical findings in real time, and brief both technical teams and executives
• Validate client remediation after fixes land
• Mentor operators, support hiring, and grow into managing the assessment team
• Provide periodic surge support on government engagements requiring TS/SCI
And what you need to have:
• 10+ years in cybersecurity, including substantial hands-on penetration testing and demonstrated red team leadership
• Top Secret clearance with SCI eligibility (no polygraph required)
• Bachelor's degree in cybersecurity, computer science, IT, or a related field, or equivalent experience
• Hands-on testing across network, web application, API, cloud, identity, and wireless
• Deep knowledge of Windows, Linux, Active Directory, networking protocols, authentication, and access controls
• Cloud and hybrid environment assessments
• Scripting and tool development in Python, PowerShell, and Bash
• Building and maintaining red team infrastructure and assessment tooling
• Working knowledge of the OWASP Testing Guide, MITRE ATT&CK, and established penetration testing methodologies
• Partnering with defensive teams to test detection and response capabilities
• Strong technical writing, client communication, and executive presentation skills
• Ability to scope effort, manage competing engagement priorities, and deliver independently
• Bonus points: OSCP, OSEP, OSWE, CRTO, CISSP, or CEH; master's degree in a related field; consulting or boutique firm experience across concurrent clients; mixed commercial and government delivery; experience building an assessment practice or managing pentesters and red team operators
• Bonus points: advanced depth in adversary emulation, application security, cloud exploitation, exploit development, or detection engineering
group id: 91173704