Red Team Operator

Booz Allen Hamilton•Fort Meade, MD

10d•$99,000 - $225,000•Remote

About The Position

You’ll join a small, mission‑focused team where adaptability, and a willingness to master new tradecraft are essential. You will plan, execute, and report full‑scope adversary emulation operations across complex, hybrid environments using clear guidance, established rules of engagement, and close support from experienced teammates. Your work will directly strengthen our clients’ detection and response by revealing real‑world gaps and shaping practical improvements. As an experienced operator at Booz Allen, you’ll draw on proven red‑teaming and security testing approaches such as covert red team, coordinated purple team, threat simulation, OT and cloud testing, and automation support, to tackle our clients’ hardest cyber challenges. You’ll continuously sharpen your skills and help evolve our methodology and tooling, from pre‑engagement scoping through execution and executive‑level readouts. Work with us as we shape defenses for the better. Join us. The world can’t wait.

Requirements

Experience planning and executing offensive security operations end‑to‑end including recon to action‑on‑objectives.
TS/SCI clearance with a polygraph.
HS diploma or GED and 6+ years of experience with offensive security operations end-to-end or Bachelor’s degree and 4+ years of experience with offensive security operations end-to-end.

Nice To Haves

Experience with cloud red‑teaming (AWS) and containerized attack infrastructure such as Docker.
Knowledge of Bash, PowerShell, Python, or other programming languages for tradecraft development and operator tooling.

Responsibilities

Plan, execute, and report full‑scope adversary emulation operations across complex, hybrid environments.
Develop rules of engagement (ROE), security assessment plans (SAP), target lists, and pre‑engagement artifacts.
Coordinate with stakeholders to deconflict, align, and minimize operational impact.
Map findings to frameworks such as MITRE ATT&CK®.
Communicate detection and response gaps with clear, actionable recommendations.
Operate common C2 and tradecraft frameworks, such as payload staging, lateral movement, and defense, evasion initial access techniques, and post‑exploitation across Windows, Linux, and Active Directory.
Create comprehensive, executive‑ready reports and detailed technical artifacts that drive remediation and measurable outcomes.
Collaborate with cross‑functional defenders, engineers, and mission stakeholders in agile, high‑tempo settings.