Red Team Operator SME & Infrastructure Engineer

Intelligent Waves LLC; Washington (District of Columbia); Hybrid; USD 165,000 - 175,000; Full time

Benefits offered by this job

Commuting expenses reimbursed

Job summary

Intelligent Waves LLC seeks a highly experienced Red Team Operator SME & Infrastructure Engineer to lead advanced red team exercises and build secure lab infrastructures. The role combines hands-on network and systems administration with red team toolchains and reporting responsibilities.

The position is hybrid (80% remote) with weekly office presence near Union Station, Washington, DC. Travel up to 10% is possible; US citizenship and ability to obtain a Public Trust clearance are required.

Qualifications

• Minimum 6 years direct, hands-on red team or government computer network exploitation/attack operations experience.
• Minimum 2 years leadership in red team operations (distinct from the above).
• Minimum 3 years hands-on experience with red team software frameworks to meet operational requirements (e.g., Cobalt Strike, Kali).
• Minimum 2 years independently conducting every phase of a red team exercise without guidance.
• Minimum 2 years developing payloads that bypass AV/EDR for red team use.
• Minimum 2 years mentoring junior and mid-level operators on red team tradecraft.
• Must possess or obtain CRTO certification within 90 days; OSCP/OSCE/OSEE/GXPN/GPEN preferred but not required.

Responsibilities

• Developing, automating, and deploying red team exercise infrastructure.
• Deploying, configuring, and maintaining routers, switches, and firewalls.
• Securing red team exercise infrastructure from unauthorized access.
• Securing red team exercise infrastructure against DCO identification and fingerprinting TTPs.
• Creating, configuring, and administering Active Developing Directory lab environments.
• Creating, modifying, and deleting user accounts, groups, computer accounts, OUs, and other objects in the directory service database.
• Installing new Windows operating systems on lab systems and drivers for proper operation.
• Managing security across the lab environment by deploying patches and monitoring for intrusion.

Skills

Red team operations

Network administration

Systems administration

Leadership

Mentoring

Report writing

Education

CRTO certification

OSCP/OSCE/OSEE/GXPN/GPEN preferred

Tools

Cobalt Strike

Kali Linux

Active Directory lab environments

Job description

Overview

Intelligent Waves currently has a need for aRed Team Operator SME & Infrastructure Engineer. TheRed Team Operator SME & Infrastructure Engineer will provide advanced red team operational and infrastructure engineering support in support of mission requirements. This is a hybrid position—80% remote—reporting once weekly to an office next door to Union Station in Washington, DC. IW reimburses 100% of commuting expenses for parking, MARC, VRE, or Metro.

Location: National Capital Region (NCR) – Hybrid (80% remote)Travel: Ability to travel up to 10% of the time; reimbursed based on IW policy, GSA Per Diem rates, and DoD Joint Travel Regulations (JTR) as required.Clearance Requirement: Must be a United States Citizen and be able to obtain and hold a Public Trust clearance.Compensation Range: $165,000–$175,000

Intelligent Waves delivers mission-focused multi-domain operational expertise and innovation to the Government through high-impact technology solutions in cybersecurity, data science, enterprise network & systems engineering, software development, and cognitive human performance.

ANYTIME. ANYWHERE. ANY DOMAIN.

Since 2006, we have proudly served federal agencies including the Department of Defense. Our ability to operate globally in a wide range of environments, coupled with our deep understanding of customer needs and requirements, enables us to provide cost-effective solutions that support some of the nation's most complex and mission-critical objectives.

Adherence to all customer site protocols is mandatory for employees.

Responsibilities

Minimum of 4 years of hands-on network administration and systems administration experience:

• Developing, automating, and deploying red team exercise infrastructure.
• Deploying, configuring, and maintaining routers, switches, and firewalls.
• Securing red team exercise infrastructure from unauthorized access.
• Securing red team exercise infrastructure against various DCO identification and fingerprinting TTPs.
• Creating, configuring, and administering Active Developing Directory lab environments.
• Creating, modifying, and deleting user accounts, groups, computer accounts, organizational units (OUs), and other objects in the directory service database.
• Installing new Windows operating systems on lab systems as needed, including installing device drivers and other software required for the systems to operate properly.
• Managing security across the lab environment by deploying new security patches and policies and monitoring activity for signs of intrusion or compromise.

Qualifications

• Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience (which is to say direct red team operations work and not just that which is in support of red team operations).
• Minimum 2 years technical red team and/or government computer network exploitation/attack operations leadership experience (note this is distinct experience from the above and cannot overlap).
• Minimum of 3 years of hands-on experience with using modifying and customizing penetration testing and red teaming software frameworks (Cobalt Strike, Kali, etc.) to meet operational requirements.
• Minimum of 2 years of independently conducting every phase of a red team exercise on their own without guidance or supervision.
• Minimum of 2 year of hands-on experience developing payloads that bypass A/V and EDR solutions for use in various phases of a red team exercise.
• Minimum of 2 years mentoring junior and mid-level operators on red team tradecraft and Advanced Knowledge Requirements (that they possess).
• Minimum of 2 years of experience in professionally delivering technical red team reports and briefings.
• Must possess or have the ability to obtain CRTO certification within 90 days of start.
• OSCP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required.