Mid-Level Red Team Operator

B&A • Washington, DC

3d • $135,000 - $150,000 • Hybrid

About The Position

Intelligent Waves, a B&A company, is hiring a Mid-Level Red Team Operator to provide contractor services for a U.S. Courts contract supporting a federal government client. The role conducts Red Team cybersecurity exercises to test and strengthen production IT infrastructure, physical facilities, and personnel within federal court systems. This is a hybrid position that is 80% remote, with a required weekly visit to an office next to Union Station in Washington, D.C. Commuting expenses for parking, MARC, VRE, or Metro are reimbursed in full. Travel may be required up to 10% of the time.

The operator uses Red Team tradecraft, custom code, and commercial-off-the-shelf exploitation frameworks to assess network and system defenses. Exercises may include spear phishing, exploitation of externally facing assets, post-exploitation activity, and on-site physical penetration assessments at federal courthouses and other Court locations. The operator must follow exercise-specific rules of engagement and standard operating procedures.

Applicants must have at least four years of relevant hands-on experience across Red Team or government computer network exploitation/attack operations, penetration testing and Red Team frameworks, network technologies, living-off-the-land techniques, scripting and programming, social engineering and physical security penetration testing, and cybersecurity assessment report writing. A CRTO certification is required or must be obtained within three months of onboarding. Applicants must be U.S. citizens and have a current security clearance or be eligible to obtain one; selected applicants will undergo a government security investigation.

The stated salary range is $135,000–$150,000. The company offers medical, dental, and vision coverage, paid PTO, life and disability insurance, day-one vesting contributions, technical training, tuition bonuses, wellness and employee assistance programs, mentorship, job shadowing, cross-training, and team-building activities.

Requirements

• At least 4 years of direct, hands-on technical Red Team and/or government computer network exploitation or attack operations experience; experience merely supporting Red Team operations does not meet this requirement.
• At least 4 years of hands-on experience using penetration testing and Red Team software frameworks, such as Cobalt Strike and Kali, in a production environment.
• At least 4 years of experience with network technologies and protocols, including the OSI model, routing, network building, and troubleshooting.
• At least 4 years of experience with living-off-the-land tactics, techniques, and procedures (TTPs) and their investigation.
• Ability to secure, configure, deploy, and troubleshoot Windows, major Unix-like operating systems, and macOS.
• At least 4 years of experience with scripting and programming languages such as Bash, C#, Ruby, Perl, Python, and PHP.
• At least 4 years of social engineering and physical security penetration-testing experience.
• At least 4 years of experience writing cybersecurity assessment reports.
• CRTO certification, or ability to obtain CRTO within 3 months of onboarding.
• U.S. citizenship; applicants must have a current security clearance or be eligible to obtain one and must meet government investigation requirements.
• Ability to remain stationary for extended periods while working at a computer; frequently operate computers, telephones, and standard office equipment; communicate effectively in person and remotely; occasionally move about the office and lift up to 20 pounds; maintain reliable attendance; and travel up to 10% as required.

Nice To Haves

• OSCP certification.
• GPEN certification.

Responsibilities

• Lead mission-critical Red Team cybersecurity exercises to test and strengthen production IT infrastructure, physical facilities, and personnel within federal court systems.
• Develop and conduct spear-phishing campaigns to gain internal network access.
• Exploit external-facing assets to gain internal network access.
• Conduct post-exploitation actions toward exercise objectives.
• Conduct on-site physical penetration assessments at federal courthouses and other Court locations to obtain internal network access.
• Use custom code and/or commercial-off-the-shelf exploitation frameworks to bypass and penetrate network and system defenses.
• Follow exercise-specific rules of engagement and Red Team standard operating procedures.
• Employ Red Team tradecraft while conducting exercises.
• Write cybersecurity assessment reports.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Paid PTO
• Life insurance
• Disability insurance
• Employer contributions with vesting starting on day one
• Technical training
• Tuition bonuses
• Wellness check-ins and seminars covering personal development, financial management, and stress management
• Formal mentorship program
• Job shadowing and cross-training opportunities
• Employee Assistance Program, including access to counseling, legal guidance, and financial planning resources
• Monthly team-building events
• Annual wellness challenges
• Full reimbursement of commuting expenses for parking, MARC, VRE, or Metro

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed