Red Team Tester (Mid)

Valiant Solutions, LLC•Washington, DC

7d•$130,000 - $142,000•Remote

About The Position

Valiant Solutions is seeking a mid-level Red Team Tester to independently conduct authorized adversarial assessments of a government customer’s systems, applications, networks, APIs, and cloud environments. The role involves creating and executing realistic attack scenarios aligned with the MITRE ATT&CK framework, identifying exploitable attack paths that automated vulnerability scans may miss, and assessing defensive detection and response. The tester will document results, produce actionable findings and remediation recommendations, contribute to assessment plans and reports, and mentor less-experienced testers through technical guidance and peer review. The position is 100% remote, with ad hoc travel to the Washington, DC metropolitan area. Remote employees are expected to maintain a quiet workspace, reliable internet, availability during core business hours aligned with coworkers and clients, and disclose outside employment for written approval. The candidate must be a U.S. citizen and able to obtain and maintain a Public Trust clearance. The anticipated base salary is $130,000–$142,000. Valiant Solutions provides cybersecurity and IT services to federal civilian, defense, and national security customers. Eligible full-time employees receive a choice of medical plans, dental and vision coverage, company-paid life and disability insurance, optional supplemental coverage, a 401(k) with company match, paid time off and federal holidays, paid certifications and professional development, access to the Valiant University training portal, flexible spending accounts, a wellness and fitness program, and referral bonuses.

Requirements

At least 5 years of experience in the subject area.
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related field.
A senior industry professional certification such as CISSP or equivalent.
Demonstrated experience conducting penetration testing, red team assessments, or offensive security testing.
Hands-on experience testing enterprise networks, applications, APIs, or cloud environments.
Knowledge of common exploitation techniques and attack paths across Windows and Linux environments.
Working knowledge of MITRE ATT&CK and penetration testing methodologies.
Experience with Burp Suite, Nmap, Metasploit, Kali Linux, Wireshark, Nessus/Tenable, BloodHound, or comparable offensive security tools.
Scripting experience in Python, PowerShell, Bash, or similar languages.
Experience translating technical testing results into well-supported findings and remediation recommendations.
U.S. citizenship is required to obtain the necessary clearance.
Must be able to obtain and maintain a Public Trust clearance.

Nice To Haves

Exposure to AWS cloud security testing.
Additional offensive security certifications such as OSCP, PNPT, eJPT, CEH, or Security+.
Familiarity with NIST SP 800-115.

Responsibilities

Plan and execute red team scenarios consistent with the approved rules of engagement, scope, objectives, and testing methodology.
Conduct reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, persistence, and other authorized adversarial activities.
Develop attack scenarios and tactics, techniques, and procedures aligned with relevant threat actors and the MITRE ATT&CK framework.
Conduct network, web application, API, identity and access, and cloud security testing as assigned.
Combine vulnerabilities and configuration weaknesses to identify attack paths that automated vulnerability scanning may not reveal.
Develop or modify scripts, tools, payloads, and testing techniques as assessments require.
Document testing procedures, evidence, vulnerabilities, attack chains, risk, and remediation recommendations.
Contribute to red team assessment plans and preliminary and final assessment reports.
Participate in purple team activities with defensive and SOC personnel to compare attacker activity with security telemetry, detections, and defensive response.
Validate remediation actions and perform targeted retesting when required.
Provide technical guidance and peer review for less-experienced testers.
Serve as a technical expert across multiple assessment assignments.
Maintain knowledge of current adversary techniques, vulnerabilities, exploits, and offensive security technologies.

Benefits

Choice of medical plans, including an HSA option and PPO, with company contributions.
Dental and vision coverage for employees and their families.
Company-paid life insurance and short- and long-term disability insurance.
Optional supplemental life, accident, and critical illness coverage.
401(k) retirement plan with company match.
Paid time off that grows with years of service.
Paid federal holidays.
Paid certifications and professional development.
Valiant University training portal.
Flexible spending accounts.
Wellness and fitness program.
Referral bonuses.