Offer summary

Qualifications:

Active TS/SCI Clearance is required., 3+ years of experience in software analysis, testing, and evaluation., Proficiency in modern programming languages such as C, C++, C#, or Java is desired., Experience with DevSecOps principles and automated code testing is preferred..

Key responsibilities:

Conduct software analysis, testing, and evaluation activities.

Engage in source code review, dynamic testing, and algorithm assessment.

Implement and maintain developer infrastructure for cyber operations.

Collaborate on offensive cyber activities and tool development.

Job description

Company Description

Blue Iris Tech Consulting is an SBA approved 8(a), Economically Disadvantaged,Woman Owned Small Business (EDWOSB),specializing in exceptional client services that focuses on Information Technology, Process Improvement, Change Management,and Strategic Planning. Blue Iris Tech believes in empowering its clients through innovative thinking, dedication,and organizational development.

Job Description

Required

Active TS/SCI Clearance - candidates without an active TS/SCI will not be considered.
3+ years' experience in software analysis, test, and evaluation, which may be described as any activities to characterize, profile, and/or validate software such as: source code review/analysis, dynamic/performance testing and evaluation, algorithm assessment, or open-source research on cyber-related vulnerabilities and exploitation development.

Qualifications

Desired

Should have experience with modern programming languages such as: C, C++, C#, or Java.
5+ years' experience in software analysis, test, and evaluation
Experience with mission-driven rapid development in support of cyber operations
An expert understanding of red teaming or offensive cyber activities and attack methodologies that underpin tool requirements
Experience with cyber red team or offensive cyber development, primarily focused on post-exploitation tools and defense evasion
Comprehensive understanding of Win32APIs.
Experience in DevSecOps principles and familiarity with automated code testing and CI/CD pipelines.
Ability to implement/maintain developer infrastructure, including diagnosing/remediating issues as they arise. Developer infrastructure concepts include but are not limited to: VPN, DNS, DHCP, LDAP, VM hypervisors (ESXi, Proxmox), artifact repositories (Nexus).
Certifications focused on advanced offensive tool development or advanced exploit development.
Familiarity with C2 platforms (e.g. Cobalt Strike).

Required profile