Red Team Operator (Hybrid)

Sentar•Quantico, VA

2d•Hybrid

About The Position

Sentar is seeking a highly skilled Red Team Operational Vulnerability Assessor (OVA)/Operator to join a Department of War Red Team certified by the NSA and accredited by USCYBERCOM. The team is based in Quantico, Virginia, and conducts advanced cyber operations in support of national security. The role focuses on planning and conducting Operational Vulnerability Assessments of Operational Technology security and defenses during discrete missions, which may also include physical or wireless security objectives and assessments of specific vulnerabilities. The operator may support other Red Team functions, including IT and OT vulnerability assessments, Persistent Cyberspace Operations adversary emulation, acquisition penetration testing, exercise support as an Opposing Force Aggressor, and instruction for the customer’s Red Team Operations Course. The position includes planning and executing no-notice and cooperative Red Team operations across enterprise, application, and cloud environments; identifying and exploiting vulnerabilities; developing proof-of-concept exploits and techniques; and providing technical findings and remediation recommendations. The operator collaborates with defensive and engineering teams, develops team tactics, techniques, procedures, documentation, and training materials, and contributes to after-action reviews, policy, and playbook updates. Responsibilities also include preparing and presenting course materials and supporting the customer’s Cybersecurity Service Provider accreditation through documentation and technical writing. The normal schedule is Monday through Friday except when traveling for a discrete mission. Considerable travel is possible. Approximately 25% of support and schedule is onsite in Quantico or on travel, with the remainder remote. This arrangement may change according to customer mission needs. During normal and remote support periods, candidates should be able to report onsite to Quantico within two hours. The role requires TS/SCI eligibility and maintaining the specified DoD certifications. Once placed, candidates must pass the customer’s Red Team Operations Course at the Red Team Certified Professional level; not achieving the minimum score on the first attempt may result in immediate removal from the team.

Requirements

At least 5 years of relevant cybersecurity experience, such as Red Team work, penetration testing, vulnerability research, security engineering, incident response, or detection engineering.
TS/SCI eligibility.
Possess and maintain a DoD 8570 IAT Level III certification: SecurityX (CASP+), CISSP, CCNP Security, CISA, GCED, GCIH, or CCSP.
Possess and maintain a DoD 8570 CSSP Auditor certification: CySA+, CEH, CISA, GSNA, CFR, or PenTest.
Possess and maintain one certification meeting DoD 8140 DCWF 541 Vulnerability Assessment Analyst requirements: CySA+, SecurityX (CASP+), CISM, CISA, CISSP, CFR, GPEN, or GSNA.
Familiarity with common offensive security tools, such as Cobalt Strike, Metasploit, Kali Linux, Sliver, and BloodHound.
Familiarity with MITRE ATT&CK and adversary-emulation methodology.
Understanding of Windows and Linux systems, networking fundamentals, and enterprise services such as Active Directory.
After placement, pass the customer’s Red Team Operations Course at the Red Team Certified Professional level; failure to achieve the minimum score on the first attempt may result in immediate removal from the team.
During normal and remote support periods, be feasibly able to report onsite to Quantico, Virginia, within two hours.

Nice To Haves

Experience in Industrial Control Systems, Internet of Things, and Facility-Related Control System environments.
Experience with AV/EDR evasion and detection-bypass techniques.
Custom tooling, payload, or command-and-control development experience.
Software development experience in C, C++, or a similar language.
Malware analysis and reverse engineering experience.
Experience with cloud platforms and services such as AWS, Azure, or GCP.
Physical security assessment or Red Team intrusion exercise experience.
Offensive-security certifications such as OSCP, OSEP, OSCE, CRTO, CRTL, or GXPN.

Responsibilities

Plan and conduct Operational Vulnerability Assessments of Operational Technology security and defenses during discrete missions, potentially including physical or wireless security objectives and assessments of specific vulnerabilities.
Support and conduct OT and IT vulnerability assessments, Persistent Cyberspace Operations adversary emulation, and acquisition penetration testing through adversarial assessments of DoW systems.
Support exercise objectives and training goals as an Opposing Force Aggressor.
Assist with instruction for the customer’s Red Team Operations Course.
Plan and execute no-notice and cooperative Red Team operations across enterprise, application, and cloud environments.
Identify and exploit network-, host-, and application-level vulnerabilities.
Develop and refine proof-of-concept exploits and techniques to test defensive measures.
Produce detailed technical findings and recommendations for remediation.
Collaborate with defensive and engineering teams to improve detection and response.
Continuously evolve team tactics, techniques, and procedures, documentation, and training materials to reflect emerging adversary behaviors.
Participate in after-action reviews and contribute to policy and playbook updates.
Prepare, update, document, and present course materials covering tactics, techniques, and procedures.
Support maintenance of the customer’s Cybersecurity Service Provider accreditation, including documentation and technical writing as needed.

Benefits

Voluntary medical, dental, and vision insurance, with Health Savings or Flexible Spending Plan options.
Voluntary life, critical illness, accident, and long-term care insurance options.
Group term life insurance and short-term and long-term disability coverage for qualifying employees.
401(k) match.
PTO plan that increases with years of service.
Holiday schedule and other leave programs, including bereavement, maternity, jury, and military duty leave.
Mental health awareness programs.
Tuition reimbursement.
Professional development reimbursement.
Recognition and awards programs.
Employee ownership.