Offensive Security & Code Analysis Engineer

LOCATION: Washington, DC

TELECOMMUTE OPTIONS: Remote

Overview:

District Tech Group Incorporated is seeking an Offensive Security & Code Analysis Engineer to lead vulnerability assessments, code reviews, and offensive security engagements. This role will be responsible for identifying security weaknesses, conducting red team exercises, and validating detection capabilities to strengthen our cybersecurity posture.

Responsibilities:

Conduct in-depth vulnerability assessments, including code analysis, to identify security risks within applications and systems.
Perform offensive security testing, including penetration testing and red team exercises, to simulate real-world attack scenarios.
Develop and validate detection content to ensure security monitoring tools effectively identify and mitigate threats.
Collaborate with developers and security teams to provide remediation guidance for identified vulnerabilities.
Research emerging threats, exploit techniques, and security trends to proactively improve security strategies.
Maintain detailed documentation of security assessments, findings, and recommendations.
Support incident response efforts by providing expertise in vulnerability exploitation and threat detection.
Assist in the automation of security testing processes to improve efficiency and scalability.

Qualifications:

Strong experience in offensive security, penetration testing, and red teaming.
Proficiency in secure code analysis and vulnerability identification across various programming languages.
Hands-on experience with security tools such as Burp Suite, Metasploit, Kali Linux, and SIEM solutions.
Knowledge of common security frameworks and standards (e.g., MITRE ATT&CK, OWASP, NIST).
Strong analytical and problem-solving skills with the ability to think like an adversary.
Excellent communication skills for reporting and collaborating with technical and non-technical teams.

Preferred Qualifications:

Industry certifications such as OSCP, OSWE, or similar offensive security credentials.
Experience developing exploits, security tools, or automation scripts.
Familiarity with cloud security assessments and container security.

If you are passionate about offensive security, vulnerability research, and improving detection capabilities, we encourage you to apply for this exciting role in our cybersecurity team.