Red Team Adversary Emulation Tech Lead

Sentar; Quantico (VA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Employee ownership

401(k) match

PTO

Health Insurance

Life Insurance

Disability Insurance

Leave programs

Job summary

Sentar seeking a Red Team Adversary Emulation Tech Lead in Quantico, VA to join an NSA-validated DoW Red Team. Lead planning and execution of persistent cyber operations emulation with potential travel.

Requires 5+ years in cybersecurity, strong offensive tooling (Cobalt Strike, Metasploit, Kali Linux), and DoD 8570 certs; TS/SCI eligibility preferred. Onsite role with robust benefits and employee ownership.

Qualifications

• 5 years of relevant cybersecurity experience (Red Team, pentesting, vulnerability research, security engineering, incident response).
• Familiarity with offensive security tooling (Cobalt Strike, Metasploit, Kali Linux, Sliver, BloodHound).
• Familiarity with MITRE ATT&CK and adversary-emulation methodology.
• Understanding of Windows and Linux systems, networking fundamentals, and Active Directory.
• Offensive-security certifications such as OSCP, OSEP, OSCE, CRTO, CRTL, GXPN.
• Experience with cloud platforms (AWS, Azure, GCP).
• Preferred: ICS/IoT environments and facility-related control systems.

Responsibilities

• Plan and conduct Red Team PCO Adversary Emulation as Tech Lead.
• Identify OT/IT vulnerabilities and select adversary emulation approaches.
• Develop and refine proof-of-concept exploits and techniques.
• Produce detailed technical findings and remediation recommendations.
• Collaborate with defensive and engineering teams to improve detection and response.
• Evolve TTPs, documentation, and training materials for emerging threats.
• Participate in after-action reviews and support RTOC course materials.

Skills

Red Team

Cybersecurity

Adversary Emulation

MITRE ATT&CK

Cobalt Strike

Metasploit

Kali Linux

Windows

Linux

Networking

Tools

Cobalt Strike

Metasploit

Kali Linux

Sliver

BloodHound

Job description

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.

Sentar is seeking a Red Team Adversary Emulation Tech Lead in Quantico, VA!

We are seeking a highly skilled Red Team Adversary Emulation Tech Lead supporting Red Team Persistent Cyberspace Operations (PCO) to join one of only eleven Department of War (DoW) Red Teams certified by the National Security Agency (NSA) and accredited by United States Cyber Command (USCYBERCOM). This team is based out of Quantico, VA. This is a unique opportunity to work on advanced cyber operations, contributing directly to national security. You will be part of an elite team, leveraging state-of-the-art tools and methodologies to stay ahead of adversaries.

Schedule: Mon-Fri onsite at Quantico, VA. May likely include some travel.

Primary role will be to plan and conduct Red Team Persistent Cyberspace Operations (PCO) Adversary Emulation as a Tech Lead in this specific Red Team capability area. This includes conducting long-term persistence emulating an intel-driven Advanced Persistent Threat (APT).

This position may likely include supporting and conducting other roles within the Red Team, to include:

• Both Operational Technology (OT) and Information Technology (IT) vulnerability assessments
• Acquisition Penetration Testing (APT) via Adversarial Assessments of DoW systems
• Support exercise objectives and training goals as an Opposing Force Aggressor (OFA)
• Assist in the instruction of the customer's Red Team Operations Course (RTOC)

Plan and execute no-notice and cooperative Red Team operations across enterprise, application, and cloud environments.

Identify and exploit network, host, and application-level vulnerabilities.

Develop and refine proof-of-concept exploits and techniques to test defensive measures.

Produce detailed technical findings and recommendations for remediation.

Collaborate with defensive and engineering teams to improve detection and response.

Continuously evolve team tactics, techniques, and procedures (TTPs), documentation, and training materials to reflect emerging adversary behaviors.

Participate in after-action reviews and contribute to policy and playbook updates.

Prepare, update, document, and present course materials that cover TTPs.

Provide support required to maintain the customer's Cybersecurity Service Provider (CSSP) accreditation per the standards, including documentation and technical writing support as needed.

Clearance Level: TS/SCI eligibility

Certifications:

• Possess and maintain a DoD 8570 IAT Level III certification: SecurityX (CASP+), CISSP, CCNP Security, CISA, GCED, GCIH, CCSP.
• Possess and maintain a DoD 8570 CSSP Auditor certification: CySA+, CEH, CISA, GSNA, CFR, PenTest.
• Possess and maintain one of the following certifications to meet DoD 8140 DCWF 541 Vulnerability Assessment Analyst certification requirements: CySA+, SecurityX (CASP+), CISM, CISA, CISSP, CFR, GPEN, GSNA.

Experience:

• 5 years of relevant cybersecurity experience (e.g., Red Team, penetration testing, vulnerability research, security engineering, incident response, detection engineering, etc).
• Familiarity with common offensive security tooling (Cobalt Strike, Metasploit, Kali Linux, Sliver, BloodHound, etc .).
• Familiarity with MITRE ATT&CK and adversary-emulation methodology.
• Understanding of Windows and Linux systems, networking fundamentals, and enterprise services (e.g., Active Directory).

Preferred Qualifications

Experience with any of the following:

• AV/EDR evasion and detection-bypass techniques.
• Custom tooling, payload or, command-and-control (C2) development.
• Software development in C, C++, or a similar language.
• Malware analysis and reverse engineering.
• Cloud platforms and services (AWS, Azure, GCP).
• Physical security assessments or red-team intrusion exercises.
• Industrial control systems (ICS), Internet of Things (IoT) environments, and Facility-Related Control Systems (FRCS).

Offensive-security certifications such as OSCP, OSEP, OSCE, CRTO. CRTL, GXPN.

Once placed in this role, candidates must pass the customer's Red Team Operations Course (RTOC) at the Red Team Certified Professional (RTCP) level. Not meeting the minimum score to achieve RTCP level during the the first attempt in the RTOC may result in immediate removal from the team.

Benefits at Sentar:

Our unique ownership model attracts top talent, giving employees the freedom to take initiative and drive meaningful improvements. In addition to cultivating a thriving and inclusive work environment, Sentar offers an extensive benefits package designed to support the well-being of employees and their families. Employee ownership is the foundation of our culture, promoting participation, teamwork, and accountability while ensuring long-term financial security and a commitment to excellence.

• Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
• Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
• Generous 401(k) match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty

Sentar is an Aff...M/F/Vets/Persons with Disabilities

We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at [e-mail] . Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.

Build, Innovate, Secure Your Career at Sentar.