Red Team Operator (Hybrid)

Sentar; Quantico (VA); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Voluntary Medical Dental Vision

401k match

Professional development reimbursement

Maternity/Jury/Military leave programs

Tuition reimbursement

Recognition and Awards programs

Job summary

Sentar in Quantico, VA seeks a highly skilled Red Team Operator/Operational Vulnerability Assessor (OVA) to join one of eleven NSA-DoW vetted teams. You will conduct OT vulnerability assessments, adversary emulation, and offensive security testing across OT/IT environments, reporting findings and driving remediation with engineering teams.

The role requires DoD 8570 IAT Level III/ CSSP Auditor certifications and hands-on red team tooling experience, with ICS/IoT/FRCS domain knowledge and

Qualifications

• 5+ years in cybersecurity with red team or similar experience.
• Familiarity with offensive security tooling and adversary emulation.
• Understanding of MITRE ATT&CK and enterprise environments.

Responsibilities

• Plan and conduct OT vulnerability assessments during missions.
• Perform adversary emulation across OT/IT environments.
• Identify and exploit network, host, and application vulnerabilities.
• Prepare detailed findings and remediation guidance for customers.

Skills

Red Team operations

Threat emulation

Vulnerability assessment

Penetration testing

Incident response

Cybersecurity fundamentals

Education

DoD 8570 IAT Level III

CSSP Auditor certification

OSCP/OSCE or equivalent

Tools

Cobalt Strike

Metasploit

Kali Linux

Sliver

BloodHound

Job description

Sentar Overview

Sentar is proud to be an employee owned company fostering a culture of empowerment collaboration and innovation Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity intelligence analytics and systems engineering We invite you to join the team where you can build innovate and secure your career Sentar is seeking a Red Team Operator We are seeking a highly skilled Red Team Operational Vulnerability Assessor OVAOperator to join one of only eleven Department of War DoW Red Teams certified by the National Security Agency NSA and accredited by United States Cyber Command USCYBERCOM This team is based out of Quantico VA This is a unique opportunity to work on advanced cyber operations contributing directly to national security You will be part of an elite team leveraging state of the art tools and methodologies to stay ahead of adversaries

Responsibilities

• Primary role will be to plan and conduct Operational Vulnerability Assessments OVA of the security and defense of Operational Technology OT during discrete missions often with additional objectives including physicalwireless security or specific vulnerabilities This position may likely include supporting and conducting other roles within the Red Team to include Both Operational Technology OT and Information Technology IT vulnerability assessmentsPersistent Cyberspace Operations PCO adversary emulationAcquisition Penetration Testing APT via Adversarial Assessments of DoW systemsSupport exercise objectives and training goals as an Opposing Force Aggressor OFAAssist in the instruction of the customers Red Team Operations Course RTOCPlan and execute no notice and cooperative Red Team operations across enterprise application and cloud environments Identify and exploit network host and application level vulnerabilities Develop and refine proof of concept exploits and techniques to test defensive measures Produce detailed technical findings and recommendations for remediation Collaborate with defensive and engineering teams to improve detection and response Continuously evolve team tactics techniques and procedures TTPs documentation and training materials to reflect emerging adversary behaviors Participate in after action reviews and contribute to policy and playbook updates Prepare update document and present course materials that cover TTPs Provide support required to maintain the customers Cybersecurity Service Provider CSSP accreditation per the standards including documentation and technical writing support as needed Considerable travel Normal schedule is Monday Friday unless on travel supporting a discrete mission Approximately 25 of support and schedule is either onsite at Quantico VA or on travel The remainder of the schedule is remote This can change based on the needs of the customers mission During normal schedule and during remote support periods candidates should be feasibly able to report onsite to Quantico VA within two hours Considerable travel possible

Role and Requirements

Role and requirements dependent Clearance Level TSSCI eligibility Certifications Possess and maintain a DoD 8570 IAT Level III certification SecurityX CASP CISSP CCNP Security CISA GCED GCIH CCSPPossess and maintain a DoD 8570 CSSP Auditor certification CySA CEH CISA GSNA CFR PenTestPossess and maintain one of the following certifications to meet DoD 8140 DCWF 541 Vulnerability Assessment Analyst certification requirements CySA SecurityX CASP CISM CISA CISSP CFR GPEN GSNA Experience 5 years of relevant cybersecurity experience eg Red Team penetration testing vulnerability research security engineering incident response detection engineering etc Familiarity with common offensive security tooling Cobalt Strike Metasploit Kali Linux Sliver BloodHound etc Familiarity with MITRE ATT&CK and adversary emulation methodology Understanding of Windows and Linux systems networking fundamentals and enterprise services eg Active Directory Preferred Qualifications AVEDR evasion and detection bypass techniques Custom tooling payload or command and control C2 development Software development in C C or a similar language Malware analysis and reverse engineering Cloud platforms and services AWS Azure GCP Physical security assessments or red team intrusion exercises Offensive security certifications such as OSCP OSEP OSCE CRTO CRTL GXPN For this specific position we are seeking experience in Industrial Control Systems ICS Internet of Things IoT and Facility Related Control System FRCS environments Once placed in this role candidates must pass the customers Red Team Operations Course RTOC at the Red Team Certified Professional RTCP level Not meeting the minimum score to achieve RTCP level during the the first attempt in the RTOC may result in immediate removal from the team

Benefits

• Voluntary Medical Dental Vision with Health Savings or Flexible Spending Plan options
• Voluntary Life Critical Illness Accident and Long Term Care insurance options
• Group Term Life Short Term and Long Term Disability is provided by Sentar to all qualifying employees
• Generous 401k match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement maternity jury and military duty
• Mental health awareness programs
• Tuition reimbursement
• Professional development reimbursement
• Recognition and Awards programs

EEO Statements

Sentar is an Affiliate to Permit MFVetsPersons with Disabilities

Our culture is one of inclusivity and support

Sentar is proudly an Equal Opportunity and VEVRAA Federal Contractor Employer MFVetsPersons with Disabilities

Follow these links to learn more about your rights EEO Is the Law Poster; EEO Is Law Supplement; and Pay Transparency

We want you to build your career at Sentar so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process contact the Recruiting Manager at recruitingsentarcom Please indicate the specifics of the assistance needed Thank you for considering Sentar in your employment search Build Innovate Secure Your Career at Sentar