Red Team Operator

OneZero Solutions; Alexandria (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with company matching

Paid time off

Job summary

OneZero Solutions is seeking a Red Team Operator to support the Coast Guard engagement in Alexandria, VA. The role involves conducting adversary simulations, building attacker infrastructure, and maintaining tooling repositories using GitLab.

The position requires hands-on experience with red team techniques, C2 frameworks, and security testing across cloud and on-prem environments. On-site work in Alexandria, with a TS/SCI clearance preferred, and a comprehensive benefits package is provided.

Qualifications

• Experience conducting red team assessments.
• Familiarity with ATT&CK/TTP-based methodologies.
• Ability to deploy and manage C2 frameworks.

Responsibilities

• Deploy, configure, and operate C2 frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.
• Apply TTPs for initial access, lateral movement, privilege escalation, persistence and data exfiltration.
• Leverage offensive security toolsets to achieve engagement objectives.
• Execute phishing assessments.

Job description

We are an employee-centric company that truly values our team members and the contributions they make to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and on building teams that are, and continue to be, technically proficient across a broad range of cyber mission areas.

OneZero full-time employees receive a highly competitive benefits package, including health, dental, vision, and life insurance, a 401(k) with company matching, paid time off and holidays, an employee referral program, and educational assistance.

Additional details are available on our website: https://www.onezerollc.com/careers/

Position Title: Red Team Operator

Location: Alexandria, VA On Site

Clearance: TS/SCI

Program Overview

OneZero is looking for a Red Team Operator to join our diverse team supporting the United States Coast Guard in Alexandria, Va. In this role the candidate will be responsible for engaging in Red Team assessments, utilizing Command and Control (C2) frameworks to conduct adversary simulations. This role involves standing up, managing, and maintaining attacker infrastructure, utilizing GitLab for script and tooling repositories, and applying established adversary tactics, techniques, and procedures (TTPs).

Key Responsibilities

• Deploy, configure, and operate C2 frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.
• Apply TTPs for initial access, lateral movement, privilege escalation, persistence and data exfiltration.
• Leverage proprietary and open-source offensive security tool sets effectively to achieve engagement objectives.
• Execute phishing assessments.

Infrastructure

• Monitor, manage, and maintain cloud and on-premise infrastructure used during assessments.
• Understanding the use of Git Repositories for maintaining operational tools and scripts.

Penetration Testing

• Internal and external penetration testing.
• Network mapping and enumeration.
• Assess web and mobile applications.