Elite Red Team Operator – TS/SCI CI-Poly Onsite

Cyber Defense Technologies; Chantilly (VA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Onsite government engagement

Job summary

Cyber Defense Technologies seeks a Red Team Operator to support an on-site engagement with a government customer in Chantilly, VA. An active Top Secret/SCI with CI Polygraph is required, and OSCP certification is highly recommended.

The role includes full-scope testing, adversary emulation, and reporting to senior leadership. Responsibilities cover network, web app, wireless, and social engineering assessments, with MITRE ATT&CK-based methodologies.

Qualifications

• Experience in penetration testing and/or red teaming.
• Bachelor's Degree and 3 years of relevant work experience.
• Knowledge of offensive security testing tools (Kali Linux, Cobalt Strike, NMAP, Burp Suite, Metasploit, etc.).
• Experience in shell scripting or automation using Python, PowerShell, or Ruby.
• Understanding of exfiltration and lateral movement techniques.
• Strong communication skills to translate technical findings to leadership.

Responsibilities

• Perform full scope Red Team testing across networks, web apps, wireless, social engineering, and EDR evasion.
• Configure and safely use adversary emulation tools across internal networks, cloud, and on-site environments using MITRE ATT&CK.
• Develop scripts and methodologies to enhance Red Team processes.
• Produce comprehensive, accurate reports and executive presentations.
• Communicate findings and strategic recommendations to client stakeholders.
• Provide risk-appropriate recommendations to remediate discovered vulnerabilities.

Job description

Cyber Defense Technologies seeks a Red Team Operator to support an on-site engagement with a government customer in Chantilly, VA. An active Top Secret/SCI with CI Polygraph is required, and OSCP certification is highly recommended.

The role includes full-scope testing, adversary emulation, and reporting to senior leadership. Responsibilities cover network, web app, wireless, and social engineering assessments, with MITRE ATT&CK-based methodologies.