AI-Focused Red Team/Blue Team Operator

ECS; Washington (District of Columbia); On-site; USD 160,000 - 205,000; Full time

Job summary

Everforth ECS in Washington, DC seeks an AI-Focused Red Team/Blue Team Operator with Top Secret clearance to join our security team. You will lead offensive and defensive cyber operations with a focus on AI-enabled systems and threats.

The role supports advanced security assessments, adversary emulation, detection engineering, and threat hunting, leveraging AI to accelerate vulnerability discovery and defense improvements. A strong emphasis on collaboration and security maturity is required.

Qualifications

• Active Top Secret clearance required; SCI eligibility preferred.
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field, or equivalent practical experience.
• 5+ years of experience in cybersecurity with meaningful hands-on experience in both red team and blue team operations.
• Experience with offensive security testing, adversary emulation, or penetration testing.
• Defensive operations, vulnerability analysis and threat hunting.
• Prompt engineering to optimize AI-driven security tools, and familiarity with prompt injection/jailbreaking defensive mitigation strategies.
• Windows, Linux, Active Directory, cloud environments, and enterprise networks.
• Security tooling such as vulnerability assessment tools, and attack simulation frameworks.
• Familiarity with MITRE ATT&CK, intrusion kill chain concepts, and adversary behaviors.
• Experience leveraging AI-enabled tools, assessing or securing AI/ML systems, large language model integrations, or AI-enabled applications.
• Experience performing vulnerability assessments using Nessus, Nmap, Tenable, Kali, Burp, Metasploit, Core Impact.
• Strong understanding of security principles related to identity, access management, segmentation, logging, incident response, and secure architecture.
• Ability to communicate highly technical issues clearly to both technical and non-technical stakeholders.
• U.S. citizenship required due to clearance requirements.

Responsibilities

• Support advanced security assessments, adversary emulation, detection engineering, and threat hunting while leveraging AI to reduce time to detect or identify zero-day vulnerabilities.
• Building agentic workflows for triage, detection tuning, and report generation.
• Fine-tuning and evaluation of security-tuned language models.
• Secure use of AI coding assistants and code-review for AI-generated output.

Skills

Top Secret clearance

Red Team

Blue Team

AI Security

Threat Hunting

Adversary Emulation

Vulnerability Analysis

MITRE ATT&CK

Windows

Linux

Active Directory

Communication

Education

Bachelor's degree

Tools

Nessus

Nmap

Tenable

Kali

Burp

Metasploit

Core Impact

Job description

Job Description

Everforth ECS is seeking an AI-Focused Red Team/Blue Team Operator to join our team in Washington, DC.

ECS is seeking Top Secret cleared Red/Blue Team Operator with deep expertise in both offensive and defensive cyber operations and a strong understanding of AI-enabled systems, threats, and security controls. This role will support advanced security assessments, adversary emulation, detection engineering, and threat hunting while leveraging AI to reduce time to detect or identify zero-day vulnerabilities.

AI/ML Security

• Adversarial ML: prompt injection, model evasion, data poisoning, model extraction
• LLM red teaming: jailbreaks, indirect injection, RAG poisoning, tool-use abuse
• Model and pipeline assessment for OWASP LLM Top 10 and AI-specific threat models
• Defending AI systems: guardrails, content filtering, evaluation harnesses, monitoring
• Use of AI for offense: agent-driven recon, code analysis, payload generation, recon at scale
• Use of AI for defense: anomaly detection, alert triage, automated enrichment, LLM-assisted hunting

AI Engineering & Automation

• Building agentic workflows for triage, detection tuning, and report generation
• Fine-tuning and evaluation of security-tuned language models

Core Technical Foundations

• Secure use of AI coding assistants and code-review for AI-generated output

Certifications / Training (suggested)

• AI security coursework (e.g., AI security fundamentals, LLM red teaming labs)

Salary Range: $160,000 - $205,000

Required Skills

• Active Top Secret clearance required; SCI eligibility preferred.
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field, or equivalent practical experience.
• 5+ years of experience in cybersecurity with meaningful hands-on experience in both red team and blue team operations.
• Demonstrated experience with:
• Offensive security testing, adversary emulation, or penetration testing
• Defensive operations, vulnerability analysis and threat hunting
• Prompt engineering to optimize AI-driven security tools, and familiarity with prompt injection/jailbreaking defensive mitigation strategies.
• Windows, Linux, Active Directory, cloud environments, and enterprise networks
• Security tooling such as vulnerability assessment tools, and attack simulation frameworks
• Working knowledge of MITRE ATT&CK, intrusion kill chain concepts, and adversary behaviors.
• Experience leveraging AI enabled tools, assessing or securing AI/ML systems, large language model integrations, or AI-enabled applications.
• Experience performing vulnerability assessments using one or more of the following:
• NESSUS
• Nmap
• Tenable
• Kali
• Burp, Metasploit, Core Impact
• Strong understanding of security principles related to identity, access management, segmentation, logging, incident response, and secure architecture.
• Ability to communicate highly technical issues clearly to both technical and non-technical stakeholders.
• U.S. citizenship required due to clearance requirements.

Desired Skills

• Experience in federal, defense, intelligence, or other classified environments.
• Familiarity with cloud security across AWS, Azure, or Google Cloud.
• Experience with container and Kubernetes security.
• Knowledge of adversarial machine learning, model security testing, AI governance, or secure AI deployment patterns.
• Relevant certifications such as:
• OSCP, OSEP, GPEN, GXPN, CRTO
• GCIH, GCIA, GCFA, GMON, GNFA
• CISSP, CCSP, or Security+
• Scripting or development experience in Python, PowerShell, Bash, or similar languages.
• Experience supporting purple team exercises and control validation programs.

#EverforthECS1

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS

is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We Value

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!