Red Team Operator (Hybrid)

Sentar Inc.; Quantico (VA); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Medical, Dental, Vision options

401(k) match

Paid time off

Job summary

Sentar is seeking a Red Team Operator to plan and conduct Offensive Vulnerability Assessments of OT and IT environments. The role involves adversary emulation, exploit development, and collaboration with defensive and engineering teams to improve detection, response, and overall security posture.

Candidates should have 5 years of cybersecurity experience and familiarity with tools like Cobalt Strike, Metasploit, Kali Linux, Sliver, and BloodHound.

Qualifications

• 5 years of relevant cybersecurity experience (e.g., Red Team, penetration testing, vulnerability research, security engineering, incident response, detection engineering).
• Familiarity with common offensive security tooling (Cobalt Strike, Metasploit, Kali Linux, Sliver, BloodHound).
• Familiarity with MITRE ATT&CK and adversary-emulation methodology.
• Understanding of Windows and Linux systems, networking fundamentals, and enterprise services (e.g., Active Directory).

Responsibilities

• Plan and conduct Operational Vulnerability Assessments (OVA) of OT and IT systems.
• Contribute to Red Team operations across enterprise, application, and cloud environments.
• Develop proof-of-concept exploits and techniques; test defensive measures.
• Produce detailed findings and remediation recommendations.
• Collaborate with defensive and engineering teams to improve detection and response.
• Evolve TTPs and training materials; participate in after-action reviews and policy updates.

Skills

Red Team Operations

Threat Emulation

MITRE ATT&CK

Windows/Linux

Vulnerability Assessment

Tools

Cobalt Strike

Metasploit

Kali Linux

Sliver

BloodHound

Job description

Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.

Sentar is seeking a Red Team Operator!

Role Description:

Responsibilities

Primary role will be to plan and conduct Operational Vulnerability Assessments (OVA) of the security and defense of Operational Technology (OT) during discrete missions, often with additional objectives, including physical/wireless security, or specific vulnerabilities.

• Both Operational Technology (OT) and Information Technology (IT) vulnerability assessments
• Persistent Cyberspace Operations (PCO) adversary emulation
• Acquisition Penetration Testing (APT) via Adversarial Assessments of DoW systems
• Support exercise objectives and training goals as an Opposing Force Aggressor (OFA)
• Assist in the instruction of the customer's Red Team Operations Course (RTOC)

Plan and execute no-notice and cooperative Red Team operations across enterprise, application, and cloud environments.

Identify and exploit network, host, and application-level vulnerabilities.

Develop and refine proof-of-concept exploits and techniques to test defensive measures.

Produce detailed technical findings and recommendations for remediation.

Collaborate with defensive and engineering teams to improve detection and response.

Continuously evolve team tactics, techniques, and procedures (TTPs), documentation, and training materials to reflect emerging adversary behaviors.

Participate in after-action reviews and contribute to policy and playbook updates.

Prepare, update, document, and present course materials that cover TTPs.

Provide support required to maintain the customer’s Cybersecurity Service Provider (CSSP) accreditation per the standards, including documentation and technical writing support as needed.

Considerable travel. Normal schedule is Monday-Friday unless on travel supporting a discrete mission. Approximately 25% of support and schedule is either onsite at Quantico, VA, or on travel. The remainder of the schedule is remote. This can change based on the needs of the customer's mission. During normal schedule and during remote support periods, candidates should be feasibly able to report onsite to Quantico, VA, within two hours.

Considerable Travel Possible. Role And Requirements Dependent.

Clearance Level: TS/SCI eligibility

Certifications:

• Possess and maintain a DoD 8570 IAT Level III certification: SecurityX (CASP+), CISSP, CCNP Security, CISA, GCED, GCIH, CCSP.
• Possess and maintain a DoD 8570 CSSP Auditor certification: CySA+, CEH, CISA, GSNA, CFR, PenTest.
• Possess and maintain one of the following certifications to meet DoD 8140 DCWF 541 Vulnerability Assessment Analyst certification requirements: CySA+, SecurityX (CASP+), CISM, CISA, CISSP, CFR, GPEN, GSNA.

Experience:

• 5 years of relevant cybersecurity experience (e.g., Red Team, penetration testing, vulnerability research, security engineering, incident response, detection engineering, etc).
• Familiarity with common offensive security tooling (Cobalt Strike, Metasploit, Kali Linux, Sliver, BloodHound, etc).
• Familiarity with MITRE ATT&CK and adversary-emulation methodology.
• Understanding of Windows and Linux systems, networking fundamentals, and enterprise services (e.g., Active Directory).

Preferred Qualifications

• AV/EDR evasion and detection-bypass techniques.
• Custom tooling, payload or, command-and-control (C2) development
• Software development in C, C++, or a similar language
• Malware analysis and reverse engineering
• Cloud platforms and services (AWS, Azure, GCP)
• Physical security assessments or red-team intrusion exercises
• Offensive-security certifications such as OSCP, OSEP, OSCE, CRTO. CRTL, GXPN.
• For this specific position, we are seeking experience in Industrial Control Systems (ICS), Internet of Things (IoT), and Facility-Related Control System (FRCS) environments.

Once placed in this role, candidates must pass the customer's Red Team Operations Course (RTOC) at the Red Team Certified Professional (RTCP) level. Not meeting the minimum score to achieve RTCP level during the first attempt in the RTOC may result in immediate removal from the team.

Benefits at Sentar:

• Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
• Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
• Generous 401(k) match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty
• Mental health awareness programs
• Tuition reimbursement
• Professional development reimbursement
• Recognition and Awards programs

Sentar is an affirmative action and equal opportunity employer M/F/Vets/Persons with Disabilities

Our culture is one of inclusivity and support. Sentar is proudly an Equal Opportunity and VEVRAA Federal Contractor Employer M/F/Vets/Persons with Disabilities. Follow these links to learn more about your rights: EEO Is the Law Poster; EEO Is Law Supplement; and Pay Transparency.

We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at [e-mail]. Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.

Build, Innovate, Secure Your Career at Sentar.