Red Team Tech Lead: Adversary Emulation & PCO

Socket.dev; Quantico (VA); On-site; USD 150,000 - 175,000; Full time

Benefits offered by this job

Relocation assistance

11 paid holidays

Healthcare

Pet insurance

401K

Job summary

Resource Management Concepts, Inc. (RMC) seeks a Red Team Adversary Emulation Tech Lead to join the NSA-certified DoW Red Team based at Quantico, Virginia.

You will lead long‑term persistence emulation and coordinate across enterprise, OT, IT, and cloud environments. You will develop exploits and defensive test scenarios, mentor junior team members, contribute to course material, and help maintain CSSP accreditation while delivering detailed findings and remediation guidance.

Qualifications

• Top-level security clearances and DoD security certifications required.
• Experience conducting red team operations, pen testing, or security engineering.
• Strong understanding of Windows/Linux environments and AD.

Responsibilities

• Plan and conduct Red Team PCO Adversary Emulation as Tech Lead.
• Support OT/IT vulnerability assessments and APT testing.
• Assist in instruction of the Red Team Operations Course (RTOC).
• Execute no-notice and cooperative red team ops across enterprise, app, and cloud.
• Develop proof-of-concept exploits and test defensive measures.
• Produce actionable findings and remediation guidance.
• Maintain CSSP accreditation documentation and training materials.
• Schedule: Mon-Fri onsite at Quantico, VA; some travel.

Skills

TS/SCI eligibility

5 years cybersecurity experience

Windows/Linux knowledge

Education

DoD 8570 IAT Level III certs (e.g., CISSP)

DoD 8570 CSSP Auditor certs (e.g., CEH, CISA)

DoD 8140 DCWF 541 vulnerability certs

Tools

Windows

Linux

Active Directory

Cloud platforms (AWS/Azure/GCP)

Job description

Resource Management Concepts, Inc. (RMC) seeks a Red Team Adversary Emulation Tech Lead to join the NSA-certified DoW Red Team based at Quantico, Virginia.

You will lead long‑term persistence emulation and coordinate across enterprise, OT, IT, and cloud environments. You will develop exploits and defensive test scenarios, mentor junior team members, contribute to course material, and help maintain CSSP accreditation while delivering detailed findings and remediation guidance.