Offensive Security Technical Lead
CACI Open At a glance
Senior Engineering Leadership role at CACI. Remote, United States · full-time · $105,100–$231,100 base.
techroles summary, based on the employer's posting.
What you'll do
- Set testing standards, review gates, evidence rules and reusable playbooks for penetration tests and red-team work
- Approve assessment plans, adversary scenarios, technical methods and other actions carrying elevated risk
- Direct technical staff across concurrent assessments, assign specialized work, mentor team members and resolve difficult issues
- Stay hands-on with complex network, application, identity, cloud and exploit-development challenges
- Accept final reports and remediation guidance, lead customer briefings, and coordinate delivery needs with project management
What you bring
- At least eight years in offensive security, including substantial hands-on penetration testing and red-team delivery
- At least five years leading demanding technical engagements, concurrent assessments or senior offensive-security teams
- Expertise governing safe testing across enterprise systems, applications, cloud environments and production settings
- Strong scripting or automation skills, sound judgment on risky methods, and an advanced hands-on certification or equivalent expertise
- U.S. citizenship and eligibility for sensitive-information access, including a High Risk Public Trust determination
Who this fits
This senior technical lead role suits someone who can guide assessment teams while remaining hands-on in offensive security. You must be a U.S. citizen and qualify for a High Risk Public Trust determination. The role is remote and may require travel within the continental United States, up to twenty-five percent.
From the employer
The Opportunity:
CACI is seeking an Offensive Security Technical Lead to own technical delivery across the penetration-testing and red-team workstreams. This position will provide continuous technical assessment support for full‑time, proactive testing of externally and internally visible federal cyber assets. This expands federal visibility by conducting continual assessments of .gov domains, subdomains, and internet‑facing assets to uncover unknown exposures, validate vulnerabilities, and provide agencies with actionable remediation guidance. The Technical Lead establishes methodology, approves complex plans and rules of engagement, governs technical risk, allocates specialized expertise across concurrent assessments, resolves escalations, and accepts final technical deliverables while remaining credible and hands-on with offensive-security tradecraft. This role supports the Continuous Diagnostics and Mitigation (CDM) Program’s mission to safeguard and secure cyberspace in an environment where the threat of cyber-attack is continuously growing and evolving and is responsible for enhancing the security, resilience, and reliability of the Nation’s cyber and communications infrastructure. The CDM Program defends the United States (U.S.) Federal Information Technology (IT) networks from cybersecurity threats by providing continuous monitoring sensors (tools), diagnosis, mitigation tools, and associated services to strengthen the security posture of Government networks.
Responsibilities:
• Serve as the senior technical authority for penetration testing and red-team delivery across the RFS portfolio; maintain alignment among customer objectives, authorization, safety, methodology, staffing, and deliverables.
• Define and mature assessment standards, rules-of-engagement patterns, technical review gates, evidence requirements, severity methodology, reporting expectations, and reusable playbooks.
• Review and approve engagement plans, adversary scenarios, infrastructure designs, tooling exceptions, exploitation approaches, data-handling controls, and high-risk technical actions.
• Guide the technical team, assign scarce specialties, mentor staff, conduct technical readiness reviews, and resolve complex cross-domain problems.
• Provide hands-on support for the most difficult network, application, Active Directory/identity, cloud, exploit-development, adversary-infrastructure, and defense-evasion challenges.
• Own final technical quality and acceptance for assessment reports, attack-path narratives, severity decisions, remediation recommendations, customer out-briefs, and purple-team scenarios.
• Lead technical customer discussions, communicate mission and business risk, and coordinate with project management on schedule, staffing, dependencies, and issue escalation without assuming administrative PM ownership.
• Capture lessons learned, measure technical quality and repeatability, and evolve the capability as customer processes and tools become known.
Qualifications:
Required:
• U.S. citizenship is required.
• The selected candidate must meet eligibility requirements for access to sensitive information and be able to obtain a Public Trust fitness determination (High Risk).
• Ability to work in customer-provided remote environments, use customer-approved tools, and comply with rules of engagement, data-handling requirements, evidence controls, deconfliction procedures, and stop-work criteria.
• Eight or more years of progressively responsible offensive-security experience, including significant hands-on penetration testing and red-team/adversary-emulation delivery.
• Five or more years leading complex technical engagements, multiple concurrent assessments, or senior offensive-security teams.
• Expert ability to scope and govern safe testing across enterprise networks, applications/APIs, Windows/Active Directory and identity, Linux, AWS/Azure, external attack surfaces, and production environments.
• Demonstrated technical authority in rules of engagement, operational risk, deconfliction, exploit validation, evidence quality, severity decisions, report acceptance, and customer out-briefing.
• Strong scripting, automation, or tool-development capability and the judgment to approve or reject high-risk technical methods.
• One or more advanced hands-on certifications such as OSEP/OSCE, OSWE, GXPN, GPEN, OSED/OSEE, CRTO/CRTL, or equivalent expert-level experience.
Desired:
• Twelve or more years across offensive security, security research, adversary emulation, or technical-assessment leadership.
• Experience leading CISA, DHS, federal high-value-asset, critical-infrastructure, ICS/OT, or similarly sensitive assessment programs.
• Experience maturing an offensive-security program, establishing quality metrics, developing training, or building repeatable technical delivery standards.
• Advanced cloud, identity, exploit-development, malware/payload, detection-engineering, or purple-team expertise.
• Ability to brief senior government leadership and translate technical attack paths into operational and mission risk.
-What You Can Expect:
A culture of integrity.
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.
An environment of trust.
CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.
A focus on continuous growth.
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.
Pay Range:
There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
Since this position can be worked in more than one location, the range shown is the national average for the position.
The proposed salary range for this position is:
$105,100-$231,100CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.
Engineering Leadership work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Engineering LeadershipRemote$100k+
Find me workBy the team behind techroles.