Red Team Operator, Senior
About The Position
Booz Allen is seeking a Senior Red Team Operator to work with a wide variety of clients, including Fortune 100 companies, to validate security controls and incident response through offensive security operations such as Red and Purple Teaming. The role leads engagements directly with client leadership and technical security staff, covering scenarios from phishing-based initial access to OT or ICS network perimeter and egress testing. The operator works with a team of 10 or more seasoned security testing professionals to improve service offerings and security testing capabilities. The work includes hands-on testing focused on detection and response, developing customized tooling to avoid AV, EDR, and other protection technologies, and exploiting and leveraging access across multiple environments, including complex Active Directory and mixed Windows and Unix environments. The role produces reports and presentations for technical and executive audiences and communicates findings and strategy to client stakeholders, including technical staff, executive leadership, and legal counsel. The position also applies security and penetration-testing techniques across a range of projects and serves as the primary interface and lead for small red teams of one to three additional testers, managing staff assignments as needed. The role is part of a team focused on cutting-edge research, innovation, and knowledge-sharing. U.S. citizenship is required due to the nature of the work. The position is listed as remote, though occasional in-person work at a Booz Allen or customer facility may be required.
Requirements
- U.S. citizenship.
- Experience using, administering, and troubleshooting Windows and Linux systems.
- Experience scripting, editing existing code, and programming in one or more of Python, Bash, C/C++, C#, Rust, Go, PowerShell, or Java.
- Experience developing, extending, or modifying exploits, shellcode, or exploit tools to evade common EDRs.
- Experience with security assessment tools such as Nessus, Metasploit, Burp Suite Pro, Cobalt Strike, or Mythic.
- Experience with Amazon cloud environments and technologies such as IAM, EC2, VPC, EBS, S3, and Lambda.
- Experience performing common Windows and Active Directory attacks, such as ADCS abuse, Kerberoasting, password spraying, and ACL abuse.
- Experience with common Azure or M365 attacks.
- Experience designing and operating Red Team infrastructure, including command-and-control infrastructure, redirectors, domains, certificates, payload delivery infrastructure, and operational security controls.
- Ability to use a Linux-based operating system as a daily base OS.
- High school diploma or GED.
Nice To Haves
- Five or more years of experience in offensive security testing, such as web application security testing, network penetration testing, red teaming, or purple teaming.
- Experience safely and effectively using AI tools such as Claude Code or Codex to support security testing engagements.
- Experience with assembly languages, including x86, or reverse engineering.
- Experience with hardware reverse engineering using JTAG or UART.
- Experience with Terraform or similar automation technologies.
- Experience with physical security assessments, including proxmark3 or similar proximity card spoofing or copying devices.
- Knowledge of network vulnerability assessments, web application security testing, network penetration testing, red teaming, security operations, or hunt.
- Knowledge of open security testing standards and projects, including OWASP and ATT&CK.
- Bachelor’s degree in Computer Engineering, Computer Science, or Cybersecurity.
- Ability to obtain an Offensive Security Certification within one year of hire, including OSWP, OSCP, OSCE, OSWE, SANS, GAWN, GPEN, or GXPN certification.
Responsibilities
- Lead Red and Purple Team engagements with client leadership and technical security staff across a range of scenarios, including phishing-based initial access and OT or ICS perimeter and egress testing.
- Conduct hands-on technical testing focused on security detection and response, using customized tooling to avoid AV, EDR, and other protection technologies.
- Exploit and leverage access in multiple environments, including complex Active Directory and mixed Windows and Unix environments.
- Develop reports and presentations for technical and executive audiences.
- Communicate findings and strategy to technical staff, executive leadership, and legal counsel.
- Apply security assessment and penetration-testing techniques across a wide range of projects.
- Serve as the primary interface and lead for small red teams of one to three additional testers, and manage staff assignments as needed.
- Contribute to enhancing service offerings and security testing capabilities through collaboration, research, innovation, and knowledge-sharing.
Benefits
- Health, life, disability, financial, and retirement benefits.
- Paid leave.
- Professional development.
- Tuition assistance.
- Work-life programs.
- Dependent care.
- Recognition awards for exceptional performance and demonstration of company values.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
High school or GED
