Red Team Operator.

OneZero Solutions • Alexandria, VA

4d • Onsite

About The Position

OneZero is looking for a Red Team Operator to join our diverse team supporting the United States Coast Guard in Alexandria, Va. In this role the candidate will be responsible for engaging in Red Team assessments, utilizing Command & Control (C2) frameworks to conduct adversary simulations. This role involves standing up, managing, and maintaining attacker infrastructure, utilizing GitLab for script and tooling repositories, and applying established adversary tactics, techniques, and procedures (TTPs).

Requirements

• 5+ years of relevant experience.
• BA/BS or equivalent years of relevant experience.
• IAT II or IAT III certification.
• GPEN, Red Team Apprentice Course (RTAC), or equivalent certification.
• Hands on experience with computers and network security.
• Experience conducting phishing campaigns or social engineering.
• Hands on experience with red team tasks and pen testing.
• Familiarity with malware development and EDR/AV bypass strategies.
• Experience with PowerShell, C, C++, or Python.
• Hands on experience utilizing Command and Control (C2) Frameworks such as Cobalt Strike, Sliver, Havoc.

Responsibilities

• Deploy, configure, and operate C2 frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.
• Apply TTPs for initial access, lateral movement, privilege escalation, persistence and data exfiltration.
• Leverage proprietary and open-source offensive security tool sets effectively to achieve engagement objectives.
• Execute phishing assessments.
• Monitor, manage, and maintain cloud and on-premise infrastructure used during assessments.
• Understanding the use of Git Repositories for maintaining operational tools and scripts.
• Internal and external penetration testing.
• Network mapping and enumeration.
• Assess web and mobile applications.
• Perform database scans.
• Assess Active Directory attack paths using tools such as BloodHound.
• Assessing Coast Guard's cyber security posture of operational networks through adversary emulation.
• Develop reports and briefs detailing findings and recommendations for all assessments completed.
• Perform cyber threat emulation during scripted exercises, to train DoD Cyber Protection Teams.

Benefits

• health insurance
• dental insurance
• vision insurance
• life insurance
• 401(k) with company matching
• paid time off and holidays
• employee referral program
• educational assistance

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level