Red Team Operator, Senior
About The Position
The Senior Red Team Operator works with a wide variety of clients, including Fortune 100 companies, to validate security controls and incident response through offensive security operations such as Red and Purple Teaming. The role leads engagements across scenarios ranging from phishing-based initial access to OT or ICS network perimeter and egress testing, and works with a team of seasoned security testing professionals to enhance service offerings and testing capabilities. The position involves hands-on technical testing focused on detection and response, including creating customized tooling to evade AV, EDR, and other protection technologies. The operator performs full exploitation and leverages access across multiple environments, including complex Active Directory and mixed Windows and Unix/Linux environments. The role also produces reports and presentations for technical and executive audiences, communicates findings and strategy to client stakeholders, and applies penetration-testing techniques across projects. The operator serves as the primary interface and lead for small red teams of one to three additional testers and manages staff assignments as needed. The role supports research, innovation, and knowledge-sharing. U.S. citizenship is required because of the nature of the work performed at the facility.
Requirements
- U.S. citizenship.
- Experience using, administering, and troubleshooting Windows and Linux systems.
- Experience scripting, editing existing code, and programming in one or more of Python, Bash, C/C++, C#, Rust, Go, PowerShell, or Java.
- Experience developing, extending, or modifying exploits, shellcode, or exploit tools to evade common EDRs.
- Experience with security assessment tools such as Nessus, Metasploit, Burp Suite Pro, Cobalt Strike, or Mythic.
- Experience with Amazon cloud environments and technologies such as IAM, EC2, VPC, EBS, S3, and Lambda.
- Experience performing common Windows and Active Directory attacks, such as ADCS abuse, Kerberoasting, password spraying, and ACL abuse.
- Experience with common Azure or M365 attacks.
- Experience designing and operating Red Team infrastructure, including command-and-control infrastructure, redirectors, domains, certificates, payload delivery infrastructure, and operational security controls.
- Ability to use a Linux-based operating system as a daily base OS.
- High school diploma or GED.
Nice To Haves
- Five or more years of experience in offensive security testing, such as web application security testing, network penetration testing, red teaming, or purple teaming.
- Experience safely and effectively leveraging AI tools such as Claude Code or Codex to support security testing engagements.
- Experience with assembly languages, including x86, or reverse engineering.
- Experience with hardware reverse engineering using JTAG or UART.
- Experience with Terraform or similar automation technologies.
- Experience with physical security assessments, including use of Proxmark3 or similar proximity-card spoofing or copying devices.
- Knowledge of network vulnerability assessments, web application security testing, network penetration testing, red teaming, security operations, or hunt.
- Knowledge of open security testing standards and projects, including OWASP and ATT&CK.
- Bachelor’s degree in Computer Engineering, Computer Science, or Cybersecurity.
- Ability to obtain an Offensive Security Certification within one year of hire, including OSWP, OSCP, OSCE, OSWE, SANS, GAWN, GPEN, or GXPN certification.
Responsibilities
- Lead Red and Purple Team engagements for clients, validating security controls and incident response.
- Conduct offensive security operations across scenarios such as phishing-based initial access and OT or ICS network perimeter and egress testing.
- Perform hands-on technical testing focused on detection and response, developing customized tooling to avoid AV, EDR, and other protection technologies.
- Conduct full exploitation and leverage access across multiple environments, including complex Active Directory and mixed Windows and Unix/Linux environments.
- Develop comprehensive and accurate reports and presentations for technical and executive audiences.
- Communicate findings and strategy to client stakeholders, including technical staff, executive leadership, and legal counsel.
- Apply security assessment and penetration-testing techniques and mindset across a wide range of projects.
- Act as the primary interface and lead for small red teams of one to three additional testers, managing staff assignments as needed.
- Contribute to enhancing service offerings and security testing capabilities, and support research, innovation, and knowledge-sharing.
Benefits
- Health, life, disability, financial, and retirement benefits.
- Paid leave.
- Professional development.
- Tuition assistance.
- Work-life programs.
- Dependent care.
- Recognition awards for exceptional performance and demonstration of company values.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
High school or GED
