Elite Red Team Operator: OT/ICS Vulnerability Assessor

Resource Management Concepts, Inc.; Quantico (VA); Hybrid; USD 150,000 - 165,000; Full time

Benefits offered by this job

Relocation assistance

Paid vacation

401K with match

Healthcare plans

Job summary

Resource Management Concepts, Inc. (RMC) seeks a highly skilled Red Team OVA/Operator based near Quantico, VA.

The role focuses on planning and executing operational vulnerability assessments of OT systems, IT/OT integration, and adversary emulation to improve detection and response capabilities for DoW environments. You will conduct no-notice assessments, develop PoCs, and deliver detailed remediation guidance while collaborating with blue teams and engineers.

Qualifications

• TS/SCI eligibility required.
• 5 years of cybersecurity experience (Red Team, pentest, IR, etc.).
• DoD 8570 IAT Level III and CSSP Auditor certifications or equivalent.
• Demonstrated knowledge of OT/ICS/IoT environments.
• Ability to pass RTOC RTCP level course on first attempt.

Responsibilities

• Plan and conduct Operational Vulnerability Assessments of OT security during missions.
• Exploit network, host, and application vulnerabilities and create PoCs.
• Produce detailed findings and remediation recommendations.
• Collaborate with defensive/engineering teams to improve detections.
• Contribute to training, playbooks, and policy updates.
• Support CSSP accreditation efforts and maintain documentation.

Skills

Red Team operations

Vulnerability assessment

OT/ICS security

IoT security experience

PCO adversary emulation

C/C++ development

Malware analysis

Cloud platforms (AWS/Azure/GCP)

OSCP/OSEP/OSCE_CRTO

CISM/CISSP/CISA knowledge

Education

DoD 8570 IAT Level III certifications

DoD 8570 CSSP Auditor certifications

DoD 8140 DCWF 541 VA analyst certs

Tools

C

C++

Windows

Linux

Job description

Resource Management Concepts, Inc. (RMC) seeks a highly skilled Red Team OVA/Operator based near Quantico, VA.

The role focuses on planning and executing operational vulnerability assessments of OT systems, IT/OT integration, and adversary emulation to improve detection and response capabilities for DoW environments. You will conduct no-notice assessments, develop PoCs, and deliver detailed remediation guidance while collaborating with blue teams and engineers.