Security Engineer (Offensive) - Red Team Adversary Emulation Tech Lead

Resource Management Concepts, Inc.•Quantico, VA

4d•$150,000 - $175,000•Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking a highly skilled Red Team Adversary Emulation Tech Lead to support Red Team Persistent Cyberspace Operations (PCO). This role is part of one of only eleven Department of War (DoW) Red Teams certified by the NSA and accredited by USCYBERCOM, based out of Quantico, VA. This is a unique opportunity to work on advanced cyber operations, contributing directly to national security. The Red Team conducts full-spectrum offensive operations to assess and improve the security posture of enterprise and mission-critical environments, emulating advanced threat actors to identify vulnerabilities and strengthen detection and response capabilities. This includes both no-notice adversarial assessments and cooperative exercises with blue teams and system owners.

Requirements

TS/SCI eligibility
5 years of relevant cybersecurity experience (e.g., Red Team, penetration testing, vulnerability research, security engineering, incident response, detection engineering, etc.).
Possess and maintain a DoD 8570 IAT Level III certification: SecurityX (CASP+), CISSP, CCNP Security, CISA, GCED, GCIH, CCSP.
Possess and maintain a DoD 8570 CSSP Auditor certification: CySA+, CEH, CISA, GSNA, CFR, PenTest.
Possess and maintain one of the following certifications to meet DoD 8140 DCWF 541 Vulnerability Assessment Analyst certification requirements: CySA+, SecurityX (CASP+), CISM, CISA, CISSP, CFR, GPEN, GSNA.
Understanding of Windows and Linux systems, networking fundamentals, and enterprise services (e.g., Active Directory).
Must pass the customer's Red Team Operations Course (RTOC) at the Red Team Certified Professional (RTCP) level upon the first attempt.

Nice To Haves

Experience with AV/EDR evasion and detection-bypass techniques.
Experience with custom tooling, payload or, command-and-control (C2) development.
Experience with software development in C, C++, or a similar language.
Experience with malware analysis and reverse engineering.
Experience with cloud platforms and services (AWS, Azure, GCP).
Experience with physical security assessments or red-team intrusion exercises.
Experience with Industrial Control Systems (ICS), Internet of Things (IoT) environments, and Facility-Related Control Systems (FRCS).
Offensive-security certifications such as OSCP, OSEP, OSCE, CRTO. CRTL, GXPN.

Responsibilities

Plan and conduct Red Team Persistent Cyberspace Operations (PCO) Adversary Emulation as a Tech Lead, including long-term persistence emulating an intel-driven Advanced Persistent Threat (APT).
Support and conduct other Red Team roles, including Operational Technology (OT) and Information Technology (IT) vulnerability assessments, Acquisition Penetration Testing (APT) via Adversarial Assessments of DoW systems, acting as an Opposing Force Aggressor (OFA), and assisting in the instruction of the customer's Red Team Operations Course (RTOC).
Plan and execute no-notice and cooperative Red Team operations across enterprise, application, and cloud environments.
Identify and exploit network, host, and application-level vulnerabilities.
Develop and refine proof-of-concept exploits and techniques to test defensive measures.
Produce detailed technical findings and recommendations for remediation.
Collaborate with defensive and engineering teams to improve detection and response.
Continuously evolve team tactics, techniques, and procedures (TTPs), documentation, and training materials to reflect emerging adversary behaviors.
Participate in after-action reviews and contribute to policy and playbook updates.
Prepare, update, document, and present course materials that cover TTPs.
Provide support required to maintain the customer’s Cybersecurity Service Provider (CSSP) accreditation per the standards, including documentation and technical writing support as needed.