Offensive Cybersecurity Engineer

One team. Global challenges. Infinite opportunities. At Viasat, we're on a mission to deliver connections with the capacity to change the world. For more than 35 years, Viasat has helped shape how consumers, businesses, governments and militaries around the globe communicate. We're looking for people who think big, act fearlessly, and create an inclusive environment that drives positive impact to join our team.

As a Viasat Offensive Security Engineer, you will be responsible for simulating real-world cyberattacks against Viasat's hardware, service network infrastructure, satellite ground stations and related systems. We are looking for a candidate who excels in classic network penetration testing combined with intricate, cloud-based web applications on a large scale. You will conduct comprehensive technical cybersecurity risk assessments and report your findings to technical and executive teams, providing clear, actionable improvements to team practices and activities.

• Web Application and Cloud Environment Testing: Conduct comprehensive security assessments of large-scale web applications, APIs, cloud environments (AWS, Azure, GCP), and supporting infrastructure.
• Network Penetration Testing: Conduct gray-box and closed system penetration tests on the Viasat network infrastructure, covering customer-facing networks, firewalls, and core ISP systems.
• Vulnerability Exploitation: Develop and execute custom exploits to demonstrate the impact of identified vulnerabilities and combine multiple weaknesses into chained attack scenarios.
• Reporting and Communication: Create high-quality, comprehensive reports that detail vulnerabilities, risk levels, and recommendations for engineering teams.
• Threat Research: Stay current with the latest security trends, exploits, and methodologies, particularly in the cloud-native technology space.
• Tool Development: Develop custom scripts and tools to automate testing processes and improve the efficiency of security assessments.

• 3+ years of experience in offensive cybersecurity engineering, network penetration testing, threat emulation development, cloud environment and web application security.
• Proficiency in cloud services and container technologies (AWS, Azure, GCP, Kubernetes, Docker)
• Experience with various web application development frameworks and languages (React, Angular, JavaScript, Python, Ruby, REST, gRPC, C, C++)
• Strong communications skills, adept at composing detailed reports, and presenting technical briefings
• US Citizenship required
• Ability to travel up to 10%

• Bachelor's degree in Cybersecurity or related engineering discipline
• OSCP or OSWE certifications
• Effectively balance multiple priorities and timelines
• Capability to thrive in ambiguous situations
• Strong self-motivation and independent work ethic
• The ability to work across a geographically distributed team

Viasat is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, ancestry, physical or mental disability, medical condition, marital status, genetics, age, or veteran status or any other applicable legally protected status or characteristic. If you would like to request an accommodation on the basis of disability for completing this on-line application, please click here.