Threat Analysis, Senior Advisor

Peraton•Denver, CO

11d

About The Position

The Senior Cybersecurity Engineer and Red Team Operator leads full-scope adversary emulation, penetration assessments, and cyber operations across enterprise, OT/ICS, tactical, and cloud-native environments. This role strengthens organizational defenses by identifying attack paths, developing threat-informed detections, hardening container and cloud architectures, and guiding distributed cyber teams.

Requirements

Active TS//SCI with the ability to obtain a Q//SCI.
Experience across offensive security, red teaming, DevSecOps, and cloud security.
Proficiency with AWS, Kubernetes, Docker, Terraform, Helm, GitLab CI, Jenkins, and Ansible.
Extensive experience with SIEM and detection tools such as ELK, Splunk, and Suricata.
Strong offensive tooling proficiency including Cobalt Strike, Metasploit, Burp Suite, and Wireshark.
Knowledge of compliance frameworks including FedRAMP, RMF, CIS, NIST, ISO, and PCI.
Leadership experience across civilian, contractor, and military cyber teams.
U.S. Citizen.
Min 12 years with BS/BA, Min 10 years with MS/MA, Min 7 years with PhD, 16 years with a HS diploma

Nice To Haves

Certifications: CISSP, GXPN, GCIH, GSEC, CCNA, CySA+, Security+, Network+.
Bachelor's degree in Computer Information Systems
Offensive certifications: OSCP, CPTS, GAWN.
Strong programming skills in Python, Shell, PowerShell, and C/C++.

Responsibilities

Plan and execute red team and adversary-emulation engagements across enterprise, OT/ICS, and multi-domain networks.
Identify, exploit, and chain vulnerabilities using tools such as Cobalt Strike, Metasploit, Caldera, Burp Suite, Nmap, and Nessus.
Develop attacker tooling in isolated labs to emulate current threat actor techniques.
Create technical reports and partner with detection engineers to convert findings into prioritized remediation.
Engineer secure architectures across multi-network AWS cloud environments.
Conduct threat modeling across cloud and container ecosystems to identify toxic combinations.
Author System Security Plans and change documentation supporting FedRAMP, RMF, and ATO packages.
Harden AI/ML pipelines and sanitize training data to prevent model poisoning.
Lead distributed cyber teams executing offensive cyber operations and incident response.
Spearhead robotics security, RF engineering, and software R&D for digital force protection.