Cyber Security Engineer

Cyber Security Engineer

Pyramid Systems is seeking a Cyber Security Engineer to support our Federal Customer. Leverage expertise in host identification, vulnerability exploitation techniques, and phishing methodologies to support cyber assessment and security operations. Develop and execute custom scripts and payloads to enable automated testing, simulation, and validation of security controls. Perform database management tasks and system/network administration to maintain secure, reliable, and well-configured environments. Apply in-depth knowledge of industry-standard assessment and exploitation tools, including Metasploit, Nmap, Burp Suite, PowerSploit, and Cobalt Strike, to conduct comprehensive security evaluations. Operate effectively in fast-paced, dynamic environments while ensuring alignment with FISMA requirements and NIST 800-series security standards. Conduct network mapping, vulnerability scanning, penetration testing, and web application security testing to identify and mitigate security weaknesses. Initiate and execute security assessments, including Phishing Assessments, Wireless Assessments, Operating System Security Assessments, and Database Security Assessments. Document assessment findings and deliver concise risk and remediation reports to stakeholders. Partner with SOC, IT, and compliance teams to strengthen overall security posture. Assist with incident response and threat-hunting activities, including root-cause analysis.

Basic Qualifications

• US Citizenship required and the ability to obtain and maintain a Public Trust Clearance.
• Bachelor’s Degree or Higher in Cyber Security or related field is preferred.
• Minimum of 3+ years operational experience and at least one related industry certification (OSCP, OSCE, GPEN, GXPN, or equivalent).

Required Skills and Experience

• Significant knowledge of FISMA and NIST 800-series standards.
• Experience with network mapping, vulnerability scanning, penetration testing, and web application testing.
• Experience conducting phishing, wireless, operating system, and database security assessments.
• Experience and ability to coordinate, maintain, transport, and set up assessment equipment.
• Proficiency operating assessment tools per SOPs and government direction.
• Proven experience conducting host identification and exploiting system and network vulnerabilities.
• Hands-on experience executing phishing techniques and supporting phishing assessment activities.
• Experience developing scripts and creating payloads to support cyber security testing and assessments.
• Practical experience performing database operations and administering systems and networks.
• Experience leveraging security assessment tools such as Metasploit, Nmap, Burp Suite, PowerSploit, and Cobalt Strike to support assessment objectives.

About Pyramid Systems, Inc.

Pyramid Systems, Inc. is an award-winning, technology leader, driving digital transformation across federal agencies. We empower forward-thinking innovations, accelerate production-ready software, and deliver secure solutions so federal agencies can meet their mission goals. Voted a Top Workplace, both regionally (Washington, DC) and Nationally (USA) the past 2 years (2023 and 2024) based on the feedback from our employees, we are headquartered in Fairfax, VA. and have a growing national footprint. We value and promote our Flexible Workplace approach because of the positive impacts it has on work-life integration. We remain committed to ensuring every employee’s voice is heard, performance and results are recognized and rewarded, development and advancement is a focus, and diversity, equity and inclusion is a company priority. We offer competitive compensation and benefits (including a recently launched Employee Stock Ownership Plan - ESOP), a robust performance-based rewards program, and we know how to have fun! Our people and culture have endured and delivered for our clients for nearly three decades.

Key skills/competency

• Cyber Security Engineering
• Vulnerability Assessment
• Penetration Testing
• Network Security
• FISMA Compliance
• NIST Standards
• Scripting and Payload Development
• Incident Response
• Threat Hunting
• Information Security