Senior Red Team Operator

B&A • Washington, DC

3d • $135,000 - $154,000 • Hybrid

About The Position

Intelligent Waves, a B&A company, is seeking a Senior Red Team Operator to provide contractor services for a U.S. Courts contract supporting a federal government mission. This hybrid position is 80% remote and requires reporting once weekly to an office next to Union Station in Washington, D.C. Commuting expenses for parking, MARC, VRE, or Metro are reimbursed at 100%. The operator will lead red team exercises testing production IT infrastructure, physical facilities, and personnel within federal court systems. The role also involves technical red team leadership, mentoring operators, conducting application security testing, and producing technical reports and briefings. Applicants must hold a current security clearance or be eligible to obtain one; only U.S. citizens are eligible for a security clearance. A CRTO certification is required within 90 days of the start date. Salary range: $135,000–$154,000.

Requirements

• At least 6 years of direct, hands-on technical red team and/or government computer network exploitation/attack operations experience.
• At least 2 years of technical red team leadership experience, not overlapping with other experience requirements.
• At least 3 years of hands-on experience modifying and customizing red teaming software frameworks such as Cobalt Strike and Kali.
• At least 2 years independently conducting every phase of a red team exercise without supervision.
• At least 2 years developing payloads that bypass antivirus and EDR solutions.
• At least 2 years mentoring junior and mid-level operators on red team tradecraft and advanced knowledge.
• At least 2 years delivering technical red team reports and briefings.
• Red team web application experience.
• CRTO certification required within 90 days of start date.
• Experience with Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), and integrating results into developer workflows.
• Knowledge of OWASP Top 10 and SANS Top 25 vulnerabilities, with the ability to exploit and remediate them.
• Experience with application security testing for web, mobile, and API endpoints.
• Current security clearance or eligibility to obtain one; only U.S. citizens are eligible for a security clearance.
• Ability to perform essential job functions with or without accommodation.
• Ability to remain stationary for extended periods while working at a computer; frequently operate standard office equipment; communicate effectively in person, by phone, video conference, and email; occasionally move about the office and lift up to 20 pounds; maintain regular and reliable attendance; and travel up to 10% as required.

Responsibilities

• Lead mission-critical red team cybersecurity exercises testing production IT infrastructure, physical facilities, and personnel within federal court systems.
• Develop and conduct spear-phishing campaigns to gain internal network access.
• Exploit external-facing assets to gain internal network access.
• Conduct post-exploitation actions toward exercise objectives.
• Conduct on-site physical penetration assessments at federal courthouses and other Court locations to obtain internal network access.
• Use custom code and/or commercial off-the-shelf exploitation frameworks to bypass and penetrate network and system defenses.
• Comply with exercise-specific rules of engagement and standard operating procedures for red team operations.
• Employ red team tradecraft during exercises.
• Mentor junior and mid-level operators on red team tradecraft and advanced knowledge.
• Deliver technical red team reports and briefings.
• Conduct application security testing for web, mobile, and API endpoints and integrate SAST/DAST results into developer workflows.

Benefits

• 100% reimbursement of commuting expenses for parking, MARC, VRE, or Metro.
• Medical, dental, and vision insurance.
• Paid PTO.
• Life and disability insurance.
• Company contributions with vesting starting on the first day.
• Technical training.
• Tuition bonuses.
• Wellness check-ins, personal development, financial management, and stress management seminars through the B&A Cares program.
• Formal mentorship program.
• Job shadowing and cross-training opportunities.
• Employee Assistance Program, including access to counseling, legal guidance, financial planning, and other support resources.
• Monthly team-building events.
• Annual wellness challenges.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed