AI-Focused Red Team/Blue Team Operator

ECS Tech Inc•Washington, DC

19h•$160,000 - $205,000

About The Position

Everforth ECS is seeking a Top Secret-cleared Red/Blue Team Operator to join its team in Washington, DC. The role combines offensive and defensive cyber operations with expertise in AI-enabled systems, threats, and security controls. It supports advanced security assessments, adversary emulation, detection engineering, and threat hunting, using AI to help reduce time to detection and identify zero-day vulnerabilities. The position covers AI/ML security, including adversarial machine learning, LLM red teaming, model and pipeline assessments, and defensive controls for AI systems. It also involves using AI for offensive and defensive security operations and building agentic workflows for triage, detection tuning, and report generation. The operator will apply secure practices when using AI coding assistants and reviewing AI-generated code.

Requirements

Active Top Secret clearance; SCI eligibility preferred.
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, or equivalent practical experience.
At least 5 years of cybersecurity experience, including meaningful hands-on experience in both red team and blue team operations.
Demonstrated experience with offensive security testing, adversary emulation, or penetration testing.
Demonstrated experience with defensive operations, vulnerability analysis, and threat hunting.
Experience with prompt engineering for AI-driven security tools and familiarity with defensive mitigations for prompt injection and jailbreaking.
Experience with Windows, Linux, Active Directory, cloud environments, and enterprise networks.
Experience with security tooling, including vulnerability assessment tools and attack simulation frameworks.
Working knowledge of MITRE ATT&CK, intrusion kill chain concepts, and adversary behaviors.
Experience leveraging AI-enabled tools or assessing or securing AI/ML systems, LLM integrations, or AI-enabled applications.
Experience performing vulnerability assessments using one or more of NESSUS, Nmap, Tenable, Kali, Burp, Metasploit, or Core Impact.
Strong understanding of identity, access management, segmentation, logging, incident response, and secure architecture.
Ability to communicate highly technical issues clearly to technical and non-technical stakeholders.
U.S. citizenship required due to clearance requirements.

Nice To Haves

SCI eligibility.
AI security coursework, such as AI security fundamentals or LLM red teaming labs.

Responsibilities

Conduct offensive security testing, adversary emulation, penetration testing, and security assessments.
Support defensive operations, detection engineering, threat hunting, vulnerability analysis, and incident-related activities.
Assess AI/ML models and pipelines for threats, including prompt injection, model evasion, data poisoning, model extraction, jailbreaks, RAG poisoning, and tool-use abuse.
Help defend AI systems through guardrails, content filtering, evaluation harnesses, and monitoring.
Use AI-enabled tools for offensive tasks such as agent-driven reconnaissance, code analysis, payload generation, and reconnaissance at scale.
Use AI for defensive tasks such as anomaly detection, alert triage, automated enrichment, and LLM-assisted hunting.
Build agentic workflows for triage, detection tuning, and report generation.
Fine-tune and evaluate security-tuned language models.
Use AI coding assistants securely and review AI-generated output.
Communicate technical issues clearly to technical and non-technical stakeholders.