Red Team Operator

VulnU; Springfield, Northern (VA, KY); Híbrido; USD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Leidos seeks a Red Team Operator to join the DHS CISOD, conducting advanced penetration testing and red team exercises to identify and exploit vulnerabilities. The role requires deep technical expertise and collaboration within an offensive security team.

The successful candidate will report findings with remediation guidance, stay current on threats, and support securing DHS infrastructure and applications in a fast-paced environment.

Formación

• Bachelor's or Master's degree in a related field with 6–8 years of professional experience.
• Minimum of 3 years of experience in penetration testing.
• Experience with multiple offensive security tools listed above.
• U.S. Citizenship and eligibility for DHS Public Trust and EOD clearance required.

Responsabilidades

• Develop and execute comprehensive red team exercises to emulate real-world cyberattacks.
• Identify weaknesses via active exploitation and testing across systems and networks.
• Collaborate with Blue Team to improve overall security posture and remediation guidance.
• Deliver detailed remediation findings and actionable recommendations.

Conocimientos

Penetration testing

Red team ops

Vulnerability assessment

Threat emulation

Educación

Bachelor's degree in a related discipline

Master's degree preferred

Certifications: GPEN GWAPT GISF GXPN OSCP OSCE OSWP OSEE CISSP CEH

Herramientas

Kali Linux

Metasploit

Burp Suite

Nmap

Cobalt Strike

BloodHound

Responder

Tenable Nessus

WebInspect

Scuba

AppDetective

Descripción del empleo

The mission of the DHS Chief Information Security Officer Directorate (DHS CISOD) is to support the Department’s implementation of all applicable regulatory requirements—including the Federal Information Security Modernization Act (FISMA), relevant OMB circulars, Executive Orders, Federal laws, directives, policies, and regulations—while providing the Department of Homeland Security (DHS) a secure and trusted computing environment. Information security is an essential business function, critical to enabling DHS to conduct its operations and deliver service to the public. We are seeking a highly skilled and experienced individual to join our cybersecurity team as a Red Team Operator. In this role, you will be responsible for conducting advanced penetration testing and red team exercises to identify and exploit vulnerabilities in our organization's systems, network, and applications. The ideal candidate will bring deep technical expertise, proven experience in vulnerability research and exploitation, and the ability to work as part of a collaborative offensive security team. Primary Responsibilities: Develop and execute comprehensive red teaming exercises to simulate real-world cyberattacks against our organization's infrastructure and applications. Identify weaknesses and vulnerabilities in our systems and network through active exploitation and testing. Collaborate with the Blue Team and other cybersecurity professionals to enhance our organization's overall security posture. Provide detailed reports and recommendations for remediation based on the findings of red team exercises. Stay up-to-date on the latest cybersecurity threats, vulnerabilities, and exploitation techniques to continually improve red team operations. Required Qualifications: · Bachelor’s degree in a related discipline and 8 years of professional experience, or Master’s degree and 6 years of professional experience. · Minimum of 3 years of experience in penetration testing · Experience with at least 3 of the following tools: Kali Linux Metasploit Burp Suite Nmap Cobalt Strike Bloodhound Responder Tenable Nessus WebInspect Scuba AppDetective · Must hold one or more of the following certifications: GPEN, GWAPT, GISF, GXPN, OSCP, OSCE, OSWP, OSEE, CISSP, or CEH. · U.S. Citizenship required; must be able to obtain DHS Public Trust and EOD clearance. Preferred Qualifications: Prior DHS IT security or audit experience. Previous system administration experience. Familiarity in at least one of the following languages: Python PowerShell Go Ruby Familiarity with common payload obfuscation techniques Malware Analysis experience 7 years of IT experience in a Computer Science discipline. If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.