AI-Focused Red Team/Blue Team Operator

ECS Corporate Services; Washington (District of Columbia); On-site; USD 160,000 - 205,000; Full time

Benefits offered by this job

Top Secret clearance

Job summary

Everforth ECS in Washington, DC is seeking an AI-Focused Red Team/Blue Team Operator with Top Secret clearance. The role combines offensive and defensive cyber operations, emphasizing AI-enabled threats, guardrails, and monitoring to reduce time to detect vulnerabilities.

The candidate will engage in adversary emulation, detection engineering, and threat hunting, leveraging AI to enhance security outcomes. Strong knowledge of AI threat models and secure AI integration is essential.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field, or equivalent practical experience.
• 5+ years of cybersecurity experience with hands-on red team and blue team operations.

Responsibilities

• Offensive security testing, adversary emulation, or penetration testing.
• Defensive operations, vulnerability analysis and threat hunting.
• Prompt engineering to optimize AI-driven security tools, including mitigation against prompt injection/jailbreaking.
• Windows, Linux, Active Directory, cloud environments, and enterprise networks security tooling such as vulnerability assessment tools and attack simulation frameworks.
• Working knowledge of MITRE ATT&CK, intrusion kill chain concepts, and adversary behaviors.
• Experience with AI-enabled tools and securing AI/ML systems.

Skills

Adversarial ML

Red Teaming

Blue Teaming

Prompt Engineering

AI Security

Threat Hunting

Threat Modeling

Education

Bachelor's degree in Cybersecurity

Equivalent practical experience

Tools

NESSUS

Nmap

Tenable

Kali

Burp

Metasploit

Core Impact

Job description

Everforth ECS is seeking an AI-Focused Red Team/Blue Team Operator to join our team in Washington, DC.

We are seeking a Top Secret cleared Red/Blue Team Operator with deep expertise in both offensive and defensive cyber operations and a strong understanding of AI-enabled systems, threats, and security controls.

This role will support advanced security assessments, adversary emulation, detection engineering, and threat hunting while leveraging AI to reduce time to detect or identify zero-day vulnerabilities.

AI/ML Security

Adversarial ML: prompt injection, model evasion, data poisoning, model extraction. LLM red teaming: jailbreaks, indirect injection, RAG poisoning, tool-use abuse. Model and pipeline assessment for OWASP LLM Top 10 and AI-specific threat models. Defending AI systems: guardrails, content filtering, evaluation harnesses, monitoring.

Use of AI for offense: agent-driven recon, code analysis, payload generation, recon at scale. Use of AI for defense: anomaly detection, alert triage, automated enrichment, LLM-assisted hunting.

AI Engineering & Automation

Building agentic workflows for triage, detection tuning, and report generation. Fine-tuning and evaluation of security-tuned language models.

Core Technical Foundations

Secure use of AI coding assistants and code-review for AI-generated output.

Certifications / Training (suggested)

AI security coursework (e.g., AI security fundamentals, LLM red teaming labs).

Salary Range

$160,000 - $205,000

General Description of Benefits

• Active Top Secret clearance required; SCI eligibility preferred.

Required Education and Experience

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field, or equivalent practical experience.

5+ years of experience in cybersecurity with meaningful hands-on experience in both red team and blue team operations.

Demonstrated Experience With

• Offensive security testing, adversary emulation, or penetration testing
• Defensive operations, vulnerability analysis and threat hunting
• Prompt engineering to optimize AI-driven security tools, and familiarity with prompt injection/jailbreaking defensive mitigation strategies.
• Windows, Linux, Active Directory, cloud environments, and enterprise networks security tooling such as vulnerability assessment tools, and attack simulation frameworks.
• Working knowledge of MITRE ATT&CK, intrusion kill chain concepts, and adversary behaviors.

Experience Leveraging AI Tools

• Experience leveraging AI enabled tools, assessing or securing AI/ML systems, large language model integrations, or AI-enabled applications.
• Experience performing vulnerability assessments using one or more of the following: NESSUS, Nmap, Tenable, Kali, Burp, Metasploit, Core Impact.

Security Principles and Communication

Strong understanding of security principles related to identity, access management, segmentation, logging, incident response, and secure architecture. Ability to communicate highly technical issues clearly to both technical and non-technical stakeholders.

Citizenship Requirement

U.S. citizenship required due to clearance requirements.