Senior Cyber Tradecraft Engineer

Job DescriptionJob DescriptionDescription: Woven is hiring a Senior Cyber Tradecraft Engineer to lead access development, drive the team’s technical direction, and serve as the primary expert on digital tradecraft and access vectors for the program. At this level, you’re not just executing test plans - you’re designing them. You’ll develop novel cyber methodologies, lead red team engagements against complex platforms, and translate findings into actionable solutions for federal customers. You’ll also mentor junior and mid-level specialists, set quality standards for documentation, and represent the team’s capabilities to customer leadership. This role requires deep expertise in how online platforms work, combined with the offensive mindset to find where those systems break. You should have a proven track record of discovering vulnerabilities and communication skills to brief senior government stakeholders on findings and recommendations. What you will do:Lead the development of novel technical approaches and cyber methodologies for assigned platforms, defining test strategies, success metrics, and evaluation frameworksConduct advanced hands-on testing across platforms — designing multi-step access chains, identifying systemic vulnerabilities, and producing comprehensive findings for customer reportingArchitect and maintain the team’s managed attribution infrastructure, establishing operational security standards and ensuring consistent tradecraft practices across all engagementsOwn and evolve the evaluation database — defining taxonomy, quality standards, and analysis frameworks that track technique effectiveness across customers and platforms over timeLead red team engagements against complex systems, coordinating multi-person operations and managing engagement scope with customer stakeholdersServe as the primary technical liaison to federal customer leadership on tradecraft capabilities, findings, and recommendationsCollaborate with the internal ML team to evaluate AI models and tools, providing expert feedback on gaps, quality, and operational applicabilityMentor junior and mid-level specialists — conducting technique reviews, leading training sessions, and developing the team’s overall skill levelStay ahead of the evolving cyber landscape, proactively identifying emerging technologies, evasion techniques, and regulatory shifts that impact the programContribute to program strategy by identifying new capability areas, customer opportunities, and technical investments the team should pursue Work environment:This role is based in Odenton, MD. A lot of the build work happens on low-side, but integration and deployment require hands-on access to classified systems that cannot be accessed remotely, so you will need to be on-site at customer facilities primarily.Travel is minimal. Expect 5–15% to Woven’s Virginia office and occasionally other locations for integration and deployment work. Some travel may be on short notice for operational needs.Schedule: Monday – Friday. Occasional after-hours work for time-sensitive operational testing, engagement execution, or technique validation.Requirements: Required qualifications:Active TS/SCI security clearance with CI Poly (must be current at time of application)U.S. citizenship (required for TS/SCI clearance)7+ years of experience in cyber operations, penetration testing, red team operations, or digital tradecraft, with at least 3 years in a senior or lead capacityProven track record of developing novel offensive methodologies — not just executing existing playbooksExtensive experience operating in digital environments under strict operational security controls, including managed attributionStrong leadership and mentorship skills — you elevate the team’s capabilities, not just your ownExcellent documentation and communication skills: ability to produce detailed technical reports and brief senior government stakeholders on findings and recommendationsAnalytical rigor — you design systematic evaluation frameworks, not ad hoc testing Preferred Qualifications:Experience leading red team engagements or adversarial security assessmentsDeep knowledge of online platforms, account creation ecosystems, and how digital identity trust is establishedExperience with mobile platform security (iOS/Android), including app-level analysis and mobile authentication flowsBackground in fraud detection engineering or anti-fraud operationsExperience managing or contributing to classified research programsRelevant certifications: OSCP, OSCE, GXPN, GPEN, or equivalent advanced offensive security credentials