Distinguished Red Team Operator

Verizon•Ashburn, VA

7d•Hybrid

About The Position

The Verizon Cyber Security (VCS) organization enables the business by protecting assets and information across Verizon networks, infrastructure and applications. VCS integrates cybersecurity governance, policies, technologies and operations across Verizon, and works to incorporate security into the design of technology systems and services. Verizon Cyber Security (VCS) is looking for a Distinguished Red Team Operator to join our Enterprise Red Team. You will be responsible for leading and participating in the design and execution of red team campaigns testing, measuring, and improving people, process, and technology. Red Team campaigns are objective based security testing for Verizon, covering multiple types of targets. Successful applicants must be capable of evaluating environments, applications, systems and processes to discover weaknesses and leverage those discoveries into actionable real world attack strategies. The successful candidate will possess an effective aptitude in thinking like an adversary, security of operating systems, networking and protocols, firewalls, databases and middleware applications, forensics, scripting and programing, phishing, and the ability to mentor and lead junior technical testers and effectively translate highly technical information to internal customers in a way that supports VCS and broader Verizon goals.

Requirements

Bachelor’s degree or four or more years of work experience.
Eight or more years of relevant work experience required demonstrated through one or a combination of job-related work experience, military experience, or specialized training or education (non-collegiate).
Six or more years of direct offensive security experience, specifically leading engagements in Adversary Emulation, Adversary Simulation, Threat Emulation or Threat Simulation.

Nice To Haves

Implementation-level familiarity with modern exploitation, including buffer overflows, heap spraying, ROP chains, and logic flaws.
Deep knowledge of Operating System internals (Windows, Linux, macOS) including memory management, process injection, API hooking, and kernel-level structures.
Proven ability to modify TTPs to evade modern EDR/NDR/XDR solutions and bypass security controls like AMSI and ETW.
Advanced proficiency in reading and modifying code in languages such as C#, C/C++, Go, or Java for the purpose of exploit development and custom tooling.
Thorough understanding of network protocols, with the ability to design covert command-and-control channels that blend with legitimate traffic.
Expertise in Active Directory and Azure AD attacks, including advanced techniques like Kerberoasting, DCSync, Golden Ticket, and identity federation exploits.
Solid understanding of cloud-native environments, specifically containerization platforms (Docker, Kubernetes) and major cloud infrastructure (AWS, Azure, GCP).
Advanced industry certifications such as OSEP, OSED, GXPN, CRTO, or OSCP/OSWE.
A track record of continuous evolution, demonstrated by participation in CTFs, contributions to open-source security tools, or speaking at industry conferences.
Fluency in Blue Team processes and technologies (SIEM logic, threat hunting, SOC triage) to better simulate realistic threats and provide actionable feedback.
Demonstrated proficiency in scripting and automation (Python, Bash, PowerShell) to develop custom offensive security tooling and bypass security controls.
A degree in a technical field.

Responsibilities

Lead and execute full-spectrum Red Team engagements, encompassing adversary emulation, social engineering, and the development of techniques to evade EDR and other controls.
Ingest and operationalize Cyber Threat Intelligence to create realistic, procedure-level emulation plans mapped to the MITRE ATT&CK framework.
Architect, develop, and maintain custom offensive tooling, scripts, and methodologies to enhance the VCS Red Team’s operational scope and efficiency.
Navigate complex, ambiguous operational environments, translating broad strategic goals into concrete execution plans with minimal oversight.
Drive cross-functional security initiatives, setting operational principles and leading the execution of significant goals that impact multiple business areas.
Safely configure and deploy advanced attacker TTPs within live environments, ensuring rigorous testing without disrupting business continuity.
Provide expert technical mentorship to team members regarding offensive campaigns, vulnerability analysis, OPSEC, and professional development.
Act as a primary Subject Matter Expert regarding security vulnerability impact ratings, offering guidance on the severity and implications of specific exposures.
Communicate complex risk scenarios to technical staff, executive leadership, and legal counsel, clearly articulating both the technical findings and the strategic impact.
Produce high-level documentation and presentations, bridging the gap between technical exploitation details and executive risk management.
Deliver pragmatic, actionable remediation guidance, helping the organization prioritize fixes based on realistic risk assessments rather than theoretical severity.