{"id":3402225,"url":"https://alion.io/job/gci-cyber-exploitervulnerability-assessment-engineer-tssci-with-poly-required","title":"Cyber Exploiter/Vulnerability Assessment Engineer (TS/SCI with Poly Required)","company":{"id":4429519,"name":"GCI","domain":"gci.tech","url":"https://alion.io/company/gci-7","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"UltiPro","truth_index":{"grade":"B","score":75,"open_postings":9,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chantilly, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":142792,"max":238451,"currency":"USD","period":"year","gross":null,"usd_annual":238451},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"BloodHound","optional":false},{"name":"CentOS Stream","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"DNP3","optional":false},{"name":"Docker","optional":false},{"name":"FreeBSD","optional":false},{"name":"GraphQL","optional":false},{"name":"Hyper-V","optional":false},{"name":"IAM","optional":false},{"name":"JavaScript","optional":false},{"name":"Kubernetes","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"Machine Learning","optional":false},{"name":"MySQL","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"OpenVAS","optional":false},{"name":"Oracle","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Perl","optional":false},{"name":"PingCastle","optional":false},{"name":"PostgreSQL","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"PyTorch","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Rest API","optional":false},{"name":"Ruby","optional":false},{"name":"SBOM","optional":false},{"name":"SQL","optional":false},{"name":"Tcpdump","optional":false},{"name":"TensorFlow","optional":false},{"name":"Ubuntu","optional":false},{"name":"VMWare","optional":false},{"name":"VPN","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-10-28T14:28:52Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-29T21:21:46Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"GCI embodies excellence, integrity and professionalism. The employees supporting our customers deliver unique, high-value mission solutions while effectively leverage the technological expertise of our valued workforce to meet critical mission requirements in the areas of Data Analytics and Software Development, Engineering, Targeting and Analysis, Operations, Training, and Cyber Operations. We maximize opportunities for success by building and maintaining trusted and reliable partnerships with our customers and industry.\nAt GCI, we solve the hard problems. As a Cyber Exploiter, a typical day will include the following duties:\nA qualified Cyber Exploiter reviews, manipulates, triages, and analyzes large datasets. Candidate is responsible for supporting operational and analytical requirements. Activities include detailed log analysis, network traffic monitoring, and vulnerability risk assessment. The individual will be expected to conduct assessments of network, software tools and systems to identify vulnerabilities, and work with internal and external technical stakeholders to identify solutions to enrich analysis. Able to follow the entire targeting life cycle by engaging in data exploitation of requirements collection, data analysis, summary and documentation, and actionable information dissemination. Able to identify, triage and exploit data collections.\nKEY RESPONSIBILITIES\nSenior Level:\nExecute complex assessments on enterprise networks, applications, databases, virtualization platforms, cloud environments, ICS, and emerging technologies\nDevelop custom assessment scripts and automation tooling\nLead testing in areas such as privilege escalation, SQLi, RCE, XSS, misconfiguration analysis, wireless, and cloud security\nTransform raw scan data into actionable findings and remediation recommendations\nMid- Level:\nConduct technical assessments across diverse IT assets\nPerform tool-based scanning using Nessus, Retina, RedSeal, HBSS, and manual testing methods \nProduce draft findings and support senior engineers in deeper exploitation \nParticipate in pre-assessment coordination, data collection, and artifact generation\nJunior Level:\nSupport data collection, artifact management, documentation, and configuration reviews \nAssist senior staff with testing, findings spreadsheet development, and reporting \nMaintain VA toolkits and prepare systems for assessment events\nTooling and Automation:\nDesign and integrate GOTS, COTS, FOSS VA tools\nMaintain Mobile Packet Capture Toolkit (MPT)\nDevelop new assessment scripts using Python, Perl, Ruby, and .NET\nEnhance assessment repeatability and automation\nSoftware engineering background\nGIAC GREM, OSWE, or developer certifications preferred\nWork alongside other team members to sustain and advance our organization’s capabilities.\nEDUCATION AND EXPERIENCE\nBachelor's degree in Computer Science, Information Technology, or other related discipline, or equivalent combination of education, technical certifications, training, and work/military experience.\nREQUIRED SKILLS and QUALIFICATIONS\nDemonstrated experience with relationship management and communication.\nDemonstrated experience with issue management, knowledge management, and the ability to stay informed and up to date on the latest vulnerability assessment issues, tools, and case technological advancements.\nDemonstrated experience with developing assessment/case reports, to include recommendations\nDemonstrates experience or knowledge of cyber forensics operations\nDemonstrated experience in building briefings and reports that convey information to a technical and non-technical audience.\nDemonstrated experience with planning and hosting technical exchange meetings as well as meetings with staff leadership.\nDemonstrated experience conducting security assessments of Windows desktop (Windows 10/11) and server (2016/2019/2022) operating systems using industry-standard tools\nDemonstrated experience conducting vulnerability assessments of Linux systems (RHEL, Ubuntu, CentOS) with additional experience in BSD-based systems (macOS, FreeBSD)\nDemonstrated experience conducting vulnerability assessments of Hypervisors (VMware vSphere, Hyper-V) and Virtual desktop infrastructure (Citrix Virtual Apps & Desktops, VMware Horizon)\nDemonstrated experience conducting vulnerability assessments of Hyperconverged infrastructure (Nutanix, VMware vSAN)\nDemonstrated experience conducting vulnerability assessments of containerized environments (Docker, Kubernetes)\nDemonstrated experience conducting vulnerability assessments or knowledge of mainframe security concepts (Z/OS, RACF)\nDemonstrated experience conducting network vulnerability assessments including: - Configuration reviews of network devices (routers, switches, firewalls) against industry standards (CIS benchmarks, vendor best practices) - Protocol analysis and traffic inspection using tools like Wireshark, tcpdump - Network architecture review including segmentation, VPN implementations, and access controls - Ability to analyze device configuration files (Cisco IOS, Palo Alto, Juniper, etc.) to identify security misconfigurations\nDemonstrated experience conducting application vulnerability assessments including: - Web application vulnerability testing (OWASP Top 10) - API security assessment (REST, GraphQL) - Authentication and authorization reviews - Familiarity with common development languages (Java, Python, .NET, JavaScript) and their security implication\nDemonstrated experience conducting vulnerability assessments of middleware platforms including traditional application servers (WebSphere, WebLogic, JBoss) and modern distributed architectures (APIs, microservices, message brokers). Understanding of both legacy SOA and contemporary service-to-service security patterns.\nDemonstrated experience conducting vulnerability assessments of relational databases (Oracle, SQL Server, MySQL, PostgreSQL) including configuration reviews, access control audits, and encryption validation.\nExperience or familiarity with assessing WiFi network security, basic Bluetooth vulnerabilities, and RFID-based access control systems.\nExperience or familiarity with Industrial Control Systems (ICS) and SCADA security concepts, including awareness of common protocols (Modbus, DNP3, OPC) and operational technology security considerations.\nDemonstrated experience conducting vulnerability assessments of AWS cloud technologies including: - Infrastructure security: EC2, S3, RDS, VPC configurations - Identity and access management: IAM policies, roles, and permissions - Network security: Security groups, NACLs, VPC segmentation - Compliance: CIS AWS Benchmarks and AWS security best practices - Experience with classified environments\nDemonstrated experience or familiarity with Azure cloud environments including: - Infrastructure security: Virtual Machines, Storage Accounts, SQL Database, Virtual Networks - Identity and access management: Azure AD, RBAC, Conditional Access policies - Network security: Network Security Groups (NSGs), Application Security Groups, Virtual Network segmentation - Compliance: CIS Azure Benchmarks and Azure security best practices - Experience with classified environments\nDemonstrated experience integrating vulnerability assessment tools across GOTS, COTS (e.g., Nessus, Qualys), and FOSS (e.g., OpenVAS, Nmap) platforms. Experience must include: - API integration and workflow orchestration - Data normalization and correlation across multiple tools - Report aggregation and consolidated assessment generation - Vulnerability management platform experience (Tenable.sc, Qualys VMDR)\nDemonstrated experience conducting vulnerability assessments of enterprise directory, naming, and authorization systems including: - Directory Services: Active Directory (domain controllers, GPOs, trusts) and LDAP implementations - Authentication: Kerberos, SAML, OAuth 2.0, Single Sign-On (SSO), and Multi-Factor Authentication (MFA) - Authorization: Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and privilege management - Assessment: Configuration reviews against CIS benchmarks, privilege escalation analysis, and account security - Experience with directory security tools (BloodHound, PingCastle) and understanding of identity and access management best practice\nDemonstrated experience or familiarity conducting vulnerability assessments of Storage Area Network (SAN) technologies including: - SAN Protocols: Fibre Channel (FC), iSCSI, and Fibre Channel over Ethernet (FCoE) - Storage Infrastructure: Enterprise storage arrays (EMC/Dell, NetApp, HPE, IBM), SAN switches, and host bus adapters (HBAs) - Security Controls: Zoning configurations, LUN masking, access controls, authentication (CHAP), and encryption\nDemonstrated experience developing or tailoring custom vulnerability assessment solutions using: - Scripting: Python, PowerShell, Bash, or other appropriate language for automation and tool development - Automation: Creating automated scanning workflows and scheduled assessments - Custom tools: Developing specialized vulnerability checks and assessment scripts\nDemonstrated experience with communicating vulnerability findings to both technical and non-technical audiences through detailed technical reports, executive summaries, and presentations.\nDemonstrated experience with developing metrics and tracking remediation progress.\nDemonstrated experience with CI/CD pipeline integration for DevSecOps.\nDemonstrated experience or familiarity with conducting vulnerability assessments of Cross Domain Solutions (CDS) including: - CDS Technologies: Guards, data diodes, and secure transfer systems - Security Controls: Information flow policies, data sanitization, content filtering - Network Security: Domain separation and segmentation\n- Compliance: ICD 503, CNSS 4009, and CDS accreditation requirements\n- CDS products (Owl, Forcepoint, BAE Systems) preferred\nDemonstrated experience or familiarity with conducting supply chain risk management assessments including vendor security evaluations, software composition analysis (SCA) and SBOM, hardware provenance verification, and understanding of supply chain security frameworks.\nDemonstrated experience or familiarity with conducting vulnerability assessments of Voice over IP (VoIP) and teleconferencing security including SIP/H.323 protocols, IP-PBX systems (Cisco, Avaya), video conferencing platforms (Zoom, Teams, Webex), and security controls (SRTP encryption, authentication, access controls).\nDemonstrated experience analyzing vulnerability scan data including false positive identification, risk-based prioritization, and correlation across multiple sources.\nDemonstrated experience assessing business impact and providing risk-based remediation recommendations.\nDemonstrated experience or ability to sustain custom vulnerability assessments toolsets including tool maintenance, updates, configuration management, and integration. Must include operational experience with Mobile Packet Capture Toolkit (MPT) or similar mobile assessment tools.\nGeneral knowledge of artificial intelligence (AI) and machine learning (ML) technologies including AI model architectures, training and inference processes, common AI frameworks (TensorFlow, PyTorch), and understanding of AI security risks\nDemonstrated experience with tool accreditation processes (RMF), security compliance validation, maintaining tools in accordance with government security requirements, and supporting tool authorization in classified environments \nCERTIFICATIONS: CISSP, OSCP, GPEN, CEH, GREM, Python, Linux+, Network+, Security+\nA candidate must be a US Citizen and requires an active/current TS/SCI with Polygraph clearance.\nEqual Opportunity Employer / Individuals with Disabilities / Protected Veterans","description_format":"text","description_chars":11806,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Endpoint Security","Information Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-10-28T14:53:20Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":22,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":238451,"is_top_pay":true},"html_url":"https://alion.io/job/gci-cyber-exploitervulnerability-assessment-engineer-tssci-with-poly-required","json_url":"https://alion.io/job/gci-cyber-exploitervulnerability-assessment-engineer-tssci-with-poly-required.json","meta":{"generated_at":"2026-10-29T23:49:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":35077,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4429519},"rest":"https://alion.io/mcp/rest/get_company?id=4429519"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgci-cyber-exploitervulnerability-assessment-engineer-tssci-with-poly-required"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgci-cyber-exploitervulnerability-assessment-engineer-tssci-with-poly-required"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgci-cyber-exploitervulnerability-assessment-engineer-tssci-with-poly-required"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gci-cyber-exploitervulnerability-assessment-engineer-tssci-with-poly-required\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgci-cyber-exploitervulnerability-assessment-engineer-tssci-with-poly-required"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3402225}},{"tool":"search_jobs","arguments":{"company":"gci.tech","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3402225},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}