Offensive Security Technical Lead

Job Title: Offensive Security Technical LeadJob Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: TS/SCIEmployee Type: RegularPercentage of Travel Required: Up to 25%Type of Travel: Continental US* * * The Opportunity: CACI is seeking an Offensive Security Technical Lead to own technical delivery across the penetration-testing and red-team workstreams. This position will provide continuous technical assessment support for full‑time, proactive testing of externally and internally visible federal cyber assets. This expands federal visibility by conducting continual assessments of .gov domains, subdomains, and internet‑facing assets to uncover unknown exposures, validate vulnerabilities, and provide agencies with actionable remediation guidance. The Technical Lead establishes methodology, approves complex plans and rules of engagement, governs technical risk, allocates specialized expertise across concurrent assessments, resolves escalations, and accepts final technical deliverables while remaining credible and hands-on with offensive-security tradecraft. This role supports the Continuous Diagnostics and Mitigation (CDM) Program’s mission to safeguard and secure cyberspace in an environment where the threat of cyber-attack is continuously growing and evolving and is responsible for enhancing the security, resilience, and reliability of the Nation’s cyber and communications infrastructure. The CDM Program defends the United States (U.S.) Federal Information Technology (IT) networks from cybersecurity threats by providing continuous monitoring sensors (tools), diagnosis, mitigation tools, and associated services to strengthen the security posture of Government networks. Responsibilities: Serve as the senior technical authority for penetration testing and red-team delivery across the RFS portfolio; maintain alignment among customer objectives, authorization, safety, methodology, staffing, and deliverables. Define and mature assessment standards, rules-of-engagement patterns, technical review gates, evidence requirements, severity methodology, reporting expectations, and reusable playbooks. Review and approve engagement plans, adversary scenarios, infrastructure designs, tooling exceptions, exploitation approaches, data-handling controls, and high-risk technical actions. Guide the technical team, assign scarce specialties, mentor staff, conduct technical readiness reviews, and resolve complex cross-domain problems. Provide...

Summary and match are AI-generated; verify details on the original posting.

Listed via Himalayas. All sources