Security Engineer - Red Team (Offensive Security)

Resource Management Concepts • Quantico, VA

3d • Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking a highly skilled Cyber Security Engineer – Red Team (Offensive Security) – to join their Cyber Defense Team in Quantico, VA. This role involves working on advanced cyber operations to contribute to national security. The Red Team conducts full-spectrum offensive operations to assess and improve the security posture of enterprise and mission-critical environments, emulating advanced threat actors, identifying vulnerabilities, and helping stakeholders strengthen detection and response capabilities.

Requirements

• TS/SCI eligibility
• 5 years of relevant cybersecurity experience (e.g., Red Team, penetration testing, vulnerability research, security engineering, incident response, detection engineering, etc.).
• Possess and maintain a DoD 8570 IAT Level III certification: SecurityX (CASP+), CISSP, CCNP Security, CISA, GCED, GCIH, CCSP.
• Possess and maintain a DoD 8570 CSSP Auditor certification: CySA+, CEH, CISA, GSNA, CFR, PenTest.
• Possess and maintain one of the following certifications to meet DoD 8140 DCWF 541 Vulnerability Assessment Analyst certification requirements: CySA+, SecurityX (CASP+), CISM, CISA, CISSP, CFR, GPEN, GSNA.
• Understanding of Windows and Linux systems, networking fundamentals, and enterprise services (e.g., Active Directory).
• Once placed in this role, candidates must pass the customer's Red Team Operations Course (RTOC) at the Red Team Certified Professional (RTCP) level. Upon the first attempt of the RTOC, the placed candidate must achieve the initial minimum requirement of Red Team Associate (RTA). Achieving a minimum RTA qualification will afford the placed candidate a second attempt at the RTOC to achieve the RTCP certification.

Nice To Haves

• Experience with any of the following: AV/EDR evasion and detection-bypass techniques.
• Custom tooling, payload or, command-and-control (C2) development.
• Software development in C, C++, or a similar language.
• Malware analysis and reverse engineering.
• Cloud platforms and services (AWS, Azure, GCP).
• Physical security assessments or red-team intrusion exercises.
• Industrial control systems (ICS) and Internet of Things (IoT) environments.
• Offensive-security certifications such as OSCP, OSEP, OSCE, CRTO. CRTL, GXPN.

Responsibilities

• Plan and execute no-notice and cooperative Red Team operations across enterprise, application, and cloud environments.
• Identify and exploit network, host, and application-level vulnerabilities.
• Develop and refine proof-of-concept exploits and techniques to test defensive measures.
• Produce detailed technical findings and recommendations for remediation.
• Collaborate with defensive and engineering teams to improve detection and response.
• Continuously evolve team tactics, techniques, and procedures (TTPs), documentation, and training materials to reflect emerging adversary behaviors.
• Participate in after-action reviews and contribute to policy and playbook updates.
• Prepare, update, document, and present course materials that cover TTPs.
• Provide support required to maintain the customer’s Cybersecurity Service Provider (CSSP) accreditation per the standards, including documentation and technical writing support as needed.
• Considerable travel.

Benefits

• Investment in employees for training, certification, education, and development.
• Tuition assistance.
• Paid relocation assistance.
• Competitive paid vacation package.
• 11 paid federal holidays.
• High-quality, low-deductible healthcare plans.
• Pet insurance.
• Competitive 401K package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed