Red Team Infrastructure - SME

B; Washington (District of Columbia); Híbrido; USD 150.000 - 200.000; Jornada completa

Descripción de la vacante

B&A is seeking a Red Team Infrastructure - SME to support a federal government contract in Washington DC. The role is hybrid with one day on-site in Washington DC and requires expert infrastructure experience in red team environments.

You will lead the development and operations of red team infrastructure, secure critical lab environments, and deliver comprehensive reports and briefings on techniques and findings to clients. A CRTO or similar certification is expected within 90 days.

Formación

• Minimum 2 years direct, hands-on red team operations.
• Minimum 2 years leadership in red team operations.
• Minimum 2 years using red team tools to meet operational requirements.
• Minimum of 2 years independently conducting every phase of a red team exercise.
• Minimum of 2 years developing payloads that bypass AV/EDR solutions.
• Minimum of 2 years mentoring junior and mid-level operators on red team tradecraft.
• Minimum of 2 years delivering technical red team reports and briefings.
• Must possess or obtain the CRTO certification within 90 days of start date.
• OSCP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required.

Responsabilidades

• Develop, automate, and deploy red team infrastructure (Ubiquiti, Proxmox, Kubernetes, Ansible, Apache/NGINX, GOCD).
• Deploy, configure, and maintain routers, switches, and firewalls.
• Secure red team infra from unauthorized access and detect threats.
• Create and manage Active Directory lab environments and user accounts.
• Install Windows and Linux OS images on lab systems and drivers."
• Manage security patches and monitor for intrusions in the lab.
• Maintain VPN access infrastructure.

Conocimientos

Red team ops

Leadership

Pentest tools

Red team lifecycle

Payload bypass

Mentoring

Red team reports

CRTO cert

Educación

High school degree

Herramientas

Cobalt Strike

Kali Linux

Descripción del empleo

Description

Red Team Infrastructure - SME

At B&A, we foster and embrace a distinct set of values that we live by and instill in all aspects of our organization: dedication, commitment, partnership, trust, and recognition. We have incorporated these values into successful delivery for our customers since 1988. B&A believes in ensuring its employees feel deeply connected to B&A, recognizing successes and hard work, and providing continuous opportunities to learn and grow. Our people are entrepreneurial thinkers that combine mindset, vision, and experience to drive value – not only to us as an organization, but to the clients we support. We promote a collaborative culture with our clients, and with each other, as one team working towards a common vision. We’d love for you to join our team!

Job Summary

B&A is looking for an Red Team Infrastructure - SME to join a contract with a federal government client in support of an important mission.

Workplace: This is a hybrid position with one day on-site in Washington DC

Responsibilities

• Developing, automating, and deploying red team exercise infrastructure – including Ubiquiti, Promox, Kubernetes and Ansible, Apache/NGINIX, and GOCD for CI/CD.
• Deploying, configuring, and maintaining routers, switches, and firewalls.
• Securing red team exercise infrastructure from unauthorized access.
• Securing red team exercise infrastructure against various DCO identification and fingerprinting TTPs.
• Creating, configuring, and administering Active Directory lab environments.
• Creating, modifying, and deleting user accounts, groups, computer accounts, organizational units (OUs), and other objects in the directory service database.
• Installing new Windows and Linux operating systems on lab systems as needed, including installing device drivers and other software required for the systems to operate properly.
• Managing security across the lab environment by deploying new security patches and policies and monitoring activity for signs of intrusion or compromise.
• Maintaining infrastructure for VPN access.

Education and Experience

• High school degree and minimum of 4 years of hands‑on network administration and systems administration experience

Required Skills

• Minimum 2 years direct, hands‑on technical red team and/or government computer network exploitation/attack operations experience (which is to say direct red team operations work and not just that which is in support of red team operations).
• Minimum 2 years technical red team and/or government computer network exploitation/attack operations leadership experience (note this is distinct experience from the above and cannot overlap).
• Minimum of 2 years of hands‑on experience with using modifying and customizing penetration testing and red teaming software frameworks (Cobalt Strike, Kali, etc.) to meet operational requirements.
• Minimum of 2 years of independently conducting every phase of a red team exercise on their own without guidance or supervision.
• Minimum of 2 year of hands‑on experience developing payloads that bypass A/V and EDR solutions for use in various phases of a red team exercise.
• Minimum of 2 years mentoring junior and mid-level operators on red team tradecraft and Advanced Knowledge Requirements (that they possess).
• Minimum of 2 years of experience in professionally delivering technical red team reports and briefings.
• Must possess or obtain the CRTO certification within 90 days of start date.
• OSCP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required.

Security Clearance

• U.S. Citizen eligible to obtain a U.S. Courts background investigation

Physical & Work Environment Requirements

• Employees must be able to perform the essential functions of this position, with or without accommodation.
• Ability to remain stationary for extended periods while working at a computer.
• Frequently operate standard office equipment, including computers and telephones.
• Ability to communicate effectively in person, by telephone, video conference, and email.
• Occasionally move about the office and lift up to 20 pounds.
• Ability to work the assigned schedule with regular and reliable attendance.
• Ability to travel up to 10% as required.

Salary Range: The base annual salary range for this position in Washington DC is $150,000 to $200,000 USD per year.

More About B&A:

B&A delivers secure, innovative, and mission-critical IT solutions to support the United States Government across all three branches—Executive, Legislative, and Judicial—focused on National Security, Defense, and Intelligence. Our team of cleared professionals specializes in Agile DevSecOps, Cloud Migration and Modernization, Data Science and Analytics, Human Capital Management, Operations and Enablement, Application Transformation, All-Source Intelligence, Geospatial Production, Engineering and Integrated Services, and Cybersecurity.

Notable Clients

B&A has grown to be a company that is trusted by our clients for exceptional service, innovative solutions, and inspired employees. Our service extends through federal, state, and local Government, the private sector, and higher education. Some of our notable clients include Department of Homeland Security, U.S. Customs and Border Protection, U.S. Senate, U.S. Courts, U.S. Census Bureau, U.S. Navy, and more.

Benefits and Programs

B&A is proud to offer three robust individual and family medical plans to full time employees, including a Health Savings Account (HSA) option as well as two tiers of dental coverage, vision, life & AD&D, disability, accident, hospital indemnity, and critical illness insurance. In addition to these benefits, B&A employees enjoy paid time off, B&A sponsored trainings and certifications, pet insurance benefits, commuter transit benefits and a free subscription to a virtual exercise platform (NEOU). B&A’s 401(k) plan is available to all employees and includes a company matching contribution.

B&A has launched several programs to focus on employee engagement, wellness, and assistance. These include:

• The B&A Cares program: 30/60/90-day wellness check ins, personal development, financial management, and stress management seminars, and more
• A formal mentorship program
• Job shadowing and cross training opportunities
• Brand Ambassador program
• Employee Assistance Program (EAP) - Access to various support resources to include counseling, legal guidance, financial planning, and more
• Monthly teambuilding events
• B&A Annual Wellness Challenges: #StepWithB&A, #WalkDuringLunchWithB&A, #VolunteeringWithB&A, #ExerciseDuringLunchWithB&A, and more

At B&A, we place significant importance on improving the communities and lives of citizens across the nation through our involvement, technology expertise, and employees. B&A puts an emphasis on charitable efforts in the Northern Virginia area, including Capital Area Food Bank pantry drives, book donations, Hope for Henry Foundation events, and many more. In recognition of all these efforts, B&A has been named a Companies as Responsive Employers (CARE) award recipient by Northern Virginia Family Services and nominated by the Northern Virginia Chamber of Commerce for Outstanding Corporate Citizenship Award.

EEO

B&A provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. B&A complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy covers conduct occurring at B&A’s offices, and other workplaces (including client sites) and all other locations where B&A is providing services, and to all work-related activities.

EEO is the Law: https://www.eeoc.gov/sites/default/files/2022-10/EEOC_KnowYourRights_screen_reader_10_20.pdf

E-Verify

B&A participates in e-Verify. We provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee’s I-9 Form to confirm work authorization.

Americans with Disabilities Act (ADA)

B&A is committed to providing reasonable accommodations to qualified individuals with disabilities in accordance with the Americans Disabilities Act and applicable law. If you need an accommodation to participate in the application or interview process, please contact [e-mail]

Drug Free Workplace:

B&A maintains a drug free workplace. Where applicable to the positions and permitted by law, employment is contingent upon successful completion of pre-employment drug screening conducted in accordance with Company policy and applicable federal; state and local requirements.