OT/ICS Red Team Operator & Adversary Emulation

Resource Management Concepts, Inc.; Quantico (VA); Hybrid; USD 150,000 - 165,000; Full time

Benefits offered by this job

Relocation assistance

Paid vacation (11 federal holidays)

Healthcare plans

Pet insurance

401K plan

Job summary

Resource Management Concepts, Inc. (RMC) seeks a seasoned Red Team Operational Vulnerability Assessor (OVA)/Operator to join one of NSA-certified DoW Red Teams based at Quantico, VA.

You will execute offensive assessments across OT/IT, ICS/IoT, and FRCS environments, emulating adversaries and strengthening defense capabilities. The role demands TS/SCI eligibility, multiple DoD 8570 certifications, and extensive Red Team experience.

Qualifications

• 5+ years of relevant cybersecurity experience (e.g., Red Team, penetration testing, vulnerability research, security engineering, incident response, detection engineering).
• DoD 8570 IAT Level III certifications such as SecurityX/CASP+, CISSP, CCNP Security, CISA, GCED, GCIH, CCSP.
• DoD 8570 CSSP Auditor certifications such as CySA+, CEH, CISA, GSNA, CFR, PenTest.
• One of the following to meet DoD 8140 DCWF 541: CySA+, SecurityX/CASP+, CISM, CISA, CISSP, CFR, GPEN, GSNA.
• Understanding of Windows and Linux systems, networking fundamentals, and enterprise services (AD).
• Must pass RTOC RTCP level on first attempt; timing may affect availability.

Responsibilities

• Plan and conduct Operational Vulnerability Assessments of OT/IT during missions, including physical/wireless security or FC vulnerabilities.
• Experience in ICS, IoT, and FRCS environments.
• Support other Red Team roles such as opportunistic adversary emulation and OT/IT assessments.
• Conduct OT and IT vulnerability assessments and adversary emulation activities.
• Develop proof-of-concept exploits and techniques to test defenses.
• Produce detailed findings and remediation recommendations for stakeholders.
• Collaborate with defensive/engineering teams to improve detection and response.
• Update TTPs, docs, and training materials to reflect evolving threats.
• Contribute to after-action reviews and policy/playbook updates.
• Prepare course materials covering TTPs and maintain CSSP accreditation documentation.
• Travel up to ~25% including onsite at Quantico, with remote work remainder.

Skills

Red Team experience

ICS/IoT/FRCS experience

OT/IT vulnerability assessments

Adversary emulation

Windows/Linux knowledge

OT/IT security tooling

Education

TS/SCI eligibility

DoD 8570 IAT Level III certs

DoD 8570 CSSP Auditor certs

DCWF 541 Vulnerability Analyst certs

Tools

C/C++ development

Job description

Resource Management Concepts, Inc. (RMC) seeks a seasoned Red Team Operational Vulnerability Assessor (OVA)/Operator to join one of NSA-certified DoW Red Teams based at Quantico, VA.

You will execute offensive assessments across OT/IT, ICS/IoT, and FRCS environments, emulating adversaries and strengthening defense capabilities. The role demands TS/SCI eligibility, multiple DoD 8570 certifications, and extensive Red Team experience.