Senior Red Team Operator

About This Role

Lead mission-critical Red Team cybersecurity exercises for federal court systems to fortify IT infrastructure, physical facilities, and personnel, ensuring national security.

Responsibilities

• Lead mission-critical Red Team cybersecurity exercises to fortify production IT infrastructure, physical facilities, and personnel within federal court systems.
• Develop and conduct spear phishing campaigns to gain internal network access.
• Conduct exploitation of external-facing assets to gain internal network access.
• Conduct post-exploitation actions toward exercise objectives.
• Conduct on-site physical penetration assessments at various federal courthouses and other Court locations to obtain internal network access.
• Use custom code and/or commercial-off-the-shelf (COTS) exploitation frameworks to bypass and penetrate network and system defenses.
• Comply with unique rules of engagement (ROE) for each exercise, along with standard operating procedures (SOP) for Red Team operations.
• Employ Red Team tradecraft while conducting exercises.

Requirements

• 6+ years direct, hands-on technical Red Team and/or government computer network exploitation/attack operations experience
• 2+ years technical Red Team leadership experience
• 3+ years hands-on experience modifying and customizing Red Teaming software frameworks (Cobalt Strike, Kali, etc.)
• 2+ years independently conducting every phase of a Red Team exercise without supervision
• 2+ years developing payloads that bypass A/V and EDR solutions
• 2+ years mentoring junior and mid-level operators on Red Team tradecraft and advanced knowledge
• 2+ years delivering technical Red Team reports and briefings
• Red Team web applications experience
• CRTO certification within 90 days of start date
• Experience with Static Application Security Testing (SAST) / Dynamic Application Security Testing (DAST) and integrating results into developer workflows
• Knowledge of OWASP Top 10 & SANS Top 25 vulnerabilities, with ability to exploit/remediate
• Application security testing for web, mobile, and API endpoints

Qualifications

• Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience, with 2 years of technical red team leadership.

Skills

* Required skills

Benefits

Certifications