Red Team Infrastructure - SME

B&A • Washington, DC

5d • $150,000 - $200,000 • Hybrid

About The Position

B&A is seeking a Red Team Infrastructure - SME to support an important federal government mission. The position is hybrid, with one day on-site in Washington, DC. The role involves developing and maintaining red team exercise infrastructure, administering lab networks and systems, and conducting and leading red team operations. Candidates must be U.S. citizens eligible to obtain a U.S. Courts background investigation. The CRTO certification must be obtained within 90 days of the start date.

Requirements

• High school degree.
• At least 4 years of hands-on network administration and systems administration experience.
• At least 2 years of direct, hands-on technical red team and/or government computer network exploitation/attack operations experience.
• At least 2 years of technical red team and/or government computer network exploitation/attack operations leadership experience, distinct from the direct operations experience requirement.
• At least 2 years of hands-on experience using, modifying, and customizing penetration-testing and red-teaming software frameworks, such as Cobalt Strike and Kali, to meet operational requirements.
• At least 2 years of independently conducting every phase of a red team exercise without guidance or supervision.
• At least 2 years of hands-on experience developing payloads that bypass antivirus and EDR solutions for use in red team exercises.
• At least 2 years of mentoring junior and mid-level operators on red team tradecraft and advanced knowledge requirements.
• At least 2 years of experience professionally delivering technical red team reports and briefings.
• Must possess or obtain the CRTO certification within 90 days of the start date.
• U.S. citizen eligible to obtain a U.S. Courts background investigation.
• Able to perform essential job functions with or without accommodation, including remaining stationary for extended periods, operating standard office equipment, communicating effectively in person and remotely, occasionally moving around the office and lifting up to 20 pounds, and maintaining reliable attendance on the assigned schedule.
• Able to travel up to 10% as required.

Nice To Haves

• OSCP, OSCE, OSEE, GXPN, and/or GPEN certification.

Responsibilities

• Develop, automate, and deploy red team exercise infrastructure, including Ubiquiti, Proxmox, Kubernetes, Ansible, Apache/NGINX, and GOCD for CI/CD.
• Deploy, configure, and maintain routers, switches, and firewalls.
• Secure red team exercise infrastructure from unauthorized access and against DCO identification and fingerprinting TTPs.
• Create, configure, and administer Active Directory lab environments.
• Create, modify, and delete user accounts, groups, computer accounts, organizational units, and other directory service objects.
• Install Windows and Linux operating systems on lab systems, including required device drivers and other software.
• Manage lab security by deploying security patches and policies and monitoring for signs of intrusion or compromise.
• Maintain infrastructure for VPN access.
• Conduct and lead technical red team or government computer network exploitation/attack operations; independently perform every phase of red team exercises.
• Customize penetration-testing and red-teaming software frameworks and develop payloads that bypass A/V and EDR solutions.
• Mentor junior and mid-level operators on red team tradecraft and deliver technical red team reports and briefings.

Benefits

• Three medical plan options for full-time employees, including a Health Savings Account option.
• Two tiers of dental coverage.
• Vision insurance.
• Life and AD&D insurance.
• Disability insurance.
• Accident insurance.
• Hospital indemnity insurance.
• Critical illness insurance.
• Paid time off.
• Company-sponsored trainings and certifications.
• Pet insurance benefits.
• Commuter transit benefits.
• Free subscription to a virtual exercise platform (NEOU).
• 401(k) plan with company matching contribution, available to all employees.
• B&A Cares wellness and assistance program, including wellness check-ins and personal development, financial management, and stress management seminars.
• Formal mentorship program.
• Job shadowing and cross-training opportunities.
• Employee Assistance Program with access to counseling, legal guidance, financial planning, and other support resources.
• Monthly team-building events.
• Annual wellness challenges.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED