Red Team Operator

Leidos • Springfield, VA

1d

About The Position

The mission of the DHS Chief Information Security Officer Directorate (DHS CISOD) is to support the Department’s implementation of all applicable regulatory requirements—including the Federal Information Security Modernization Act (FISMA), relevant OMB circulars, Executive Orders, Federal laws, directives, policies, and regulations—while providing the Department of Homeland Security (DHS) a secure and trusted computing environment. Information security is an essential business function, critical to enabling DHS to conduct its operations and deliver service to the public. We are seeking a highly skilled and experienced individual to join our cybersecurity team as a Red Team Operator. In this role, you will be responsible for conducting advanced penetration testing and red team exercises to identify and exploit vulnerabilities in our organization's systems, network, and applications. The ideal candidate will bring deep technical expertise, proven experience in vulnerability research and exploitation, and the ability to work as part of a collaborative offensive security team.

Requirements

• Bachelor’s degree in a related discipline and 8+ years of professional experience , or Master’s degree and 6+ years of professional experience .
• Minimum of 3 years of experience in penetration testing
• Experience with at least 3 of the following tools : Kali Linux Metasploit Burp Suite Nmap Cobalt Strike Bloodhound Responder Tenable Nessus WebInspect Scuba AppDetective
• Must hold one or more of the following certifications: GPEN, GWAPT, GISF, GXPN, OSCP, OSCE, OSWP, OSEE, CISSP, or CEH .
• U.S. Citizenship required; must be able to obtain DHS Public Trust and EOD clearance.

Nice To Haves

• Prior DHS IT security or audit experience.
• Previous system administration experience.
• Familiarity in at least one of the following languages: Python PowerShell Go Ruby
• Familiarity with common payload obfuscation techniques
• Malware Analysis experience
• 7+ years of IT experience in a Computer Science discipline.

Responsibilities

• Develop and execute comprehensive red teaming exercises to simulate real-world cyberattacks against our organization's infrastructure and applications.
• Identify weaknesses and vulnerabilities in our systems and network through active exploitation and testing.
• Collaborate with the Blue Team and other cybersecurity professionals to enhance our organization's overall security posture.
• Provide detailed reports and recommendations for remediation based on the findings of red team exercises.
• Stay up-to-date on the latest cybersecurity threats, vulnerabilities, and exploitation techniques to continually improve red team operations.

Benefits

• The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior