Red Team Lead: Adversary Emulation & Ops

Booz Allen Hamilton; Atlanta (GA); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a Red Team Operations Lead to conduct advanced adversary emulation operations against real-world targets. You will lead a small team through design, development, and execution, ensuring objectives are met within timelines and reporting to leadership with clear, executive-ready reports.

The role requires multi-year experience in cybersecurity and Red Teaming, familiarity with EDR evasion in MFA environments, and proficiency with offensive tooling and

Qualifications

• 5+ years of experience with cybersecurity.
• 5+ years of experience with Red Teaming, Purple Teaming, or tool development.
• Experience with cyber hands-on keyboard (HOK) during multiple Red Team engagements, planning, and leading Red Team engagements.
• Experience with EDR evasion in a MFA environment.
• Experience with common penetration testing and Red Team tools, including Mythic, Cobalt Strike or Sliver.
• Experience with command-and-control frameworks, offensive infrastructure deployment, cloud technologies, reverse engineering malware, data obfuscation or encryption, AD exploitation, and authentication technologies.
• Experience with OPSEC infrastructure, including Docker, Redirectors, or Mail Servers, and exploit development in Windows and Linux environments.

Responsibilities

• Lead a Red Team operations during design, development, and execution.
• Ensure objectives are met within timeline and report to leadership.
• Develop scenarios and artifacts that mimic real adversaries for testing.
• Improve team tradecraft, techniques, and tooling; provide mentorship to other operators.

Skills

Cybersecurity experience

Red Teaming

Purple Teaming

Tool development

HOK experience

EDR evasion in MFA env

Penetration testing tools

AD exploitation

Tools

Mythic

Cobalt Strike

Sliver

Job description

Booz Allen Hamilton is seeking a Red Team Operations Lead to conduct advanced adversary emulation operations against real-world targets. You will lead a small team through design, development, and execution, ensuring objectives are met within timelines and reporting to leadership with clear, executive-ready reports.

The role requires multi-year experience in cybersecurity and Red Teaming, familiarity with EDR evasion in MFA environments, and proficiency with offensive tooling and