Security Engineer (Offensive) - Red Team Operational Vulnerability Assessor

Resource Management Concepts, Inc.; Quantico (VA); Hybrid; USD 150.000 - 165.000; Vollzeit

Benefits dieser Stelle

Relocation assistance

Paid vacation (11 federal holidays)

Healthcare plans

Pet insurance

401K plan

Zusammenfassung

Resource Management Concepts, Inc. (RMC) seeks a seasoned Red Team Operational Vulnerability Assessor (OVA)/Operator to join one of NSA-certified DoW Red Teams based at Quantico, VA.

You will execute offensive assessments across OT/IT, ICS/IoT, and FRCS environments, emulating adversaries and strengthening defense capabilities. The role demands TS/SCI eligibility, multiple DoD 8570 certifications, and extensive Red Team experience.

Qualifikationen

• 5+ years of relevant cybersecurity experience (e.g., Red Team, penetration testing, vulnerability research, security engineering, incident response, detection engineering).
• DoD 8570 IAT Level III certifications such as SecurityX/CASP+, CISSP, CCNP Security, CISA, GCED, GCIH, CCSP.
• DoD 8570 CSSP Auditor certifications such as CySA+, CEH, CISA, GSNA, CFR, PenTest.
• One of the following to meet DoD 8140 DCWF 541: CySA+, SecurityX/CASP+, CISM, CISA, CISSP, CFR, GPEN, GSNA.
• Understanding of Windows and Linux systems, networking fundamentals, and enterprise services (AD).
• Must pass RTOC RTCP level on first attempt; timing may affect availability.

Aufgaben

• Plan and conduct Operational Vulnerability Assessments of OT/IT during missions, including physical/wireless security or FC vulnerabilities.
• Experience in ICS, IoT, and FRCS environments.
• Support other Red Team roles such as opportunistic adversary emulation and OT/IT assessments.
• Conduct OT and IT vulnerability assessments and adversary emulation activities.
• Develop proof-of-concept exploits and techniques to test defenses.
• Produce detailed findings and remediation recommendations for stakeholders.
• Collaborate with defensive/engineering teams to improve detection and response.
• Update TTPs, docs, and training materials to reflect evolving threats.
• Contribute to after-action reviews and policy/playbook updates.
• Prepare course materials covering TTPs and maintain CSSP accreditation documentation.
• Travel up to ~25% including onsite at Quantico, with remote work remainder.

Kenntnisse

Red Team experience

ICS/IoT/FRCS experience

OT/IT vulnerability assessments

Adversary emulation

Windows/Linux knowledge

OT/IT security tooling

Ausbildung

TS/SCI eligibility

DoD 8570 IAT Level III certs

DoD 8570 CSSP Auditor certs

DCWF 541 Vulnerability Analyst certs

Tools

C/C++ development

Jobbeschreibung

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

We are seeking a highly skilled Red Team Operational Vulnerability Assessor (OVA)/Operator to join one of only eleven Department of War (DoW) Red Teams certified by the National Security Agency (NSA) and accredited by United States Cyber Command (USCYBERCOM). This team is based out of Quantico, VA. This is a unique opportunity to work on advanced cyber operations, contributing directly to national security. You will be part of an elite team, leveraging state-of-the-art tools and methodologies to stay ahead of adversaries.

The Red Team conducts full-spectrum offensive operations to assess and improve the security posture of enterprise and mission-critical environments. This includes both no-notice adversarial assessments and cooperative exercises with blue teams and system owners. Team members emulate advanced threat actors, identify vulnerabilities, and help stakeholders strengthen detection and response capabilities.

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

We are seeking a highly skilled Red Team Operational Vulnerability Assessor (OVA)/Operator to join one of only eleven Department of War (DoW) Red Teams certified by the National Security Agency (NSA) and accredited by United States Cyber Command (USCYBERCOM). This team is based out of Quantico, VA. This is a unique opportunity to work on advanced cyber operations, contributing directly to national security. You will be part of an elite team, leveraging state-of-the-art tools and methodologies to stay ahead of adversaries.

The Red Team conducts full-spectrum offensive operations to assess and improve the security posture of enterprise and mission-critical environments. This includes both no-notice adversarial assessments and cooperative exercises with blue teams and system owners. Team members emulate advanced threat actors, identify vulnerabilities, and help stakeholders strengthen detection and response capabilities.

Requirements

Responsibilities

• Primary role will be to plan and conduct Operational Vulnerability Assessments (OVA) of the security and defense of Operational Technology (OT) and Information Technology (IT) during discrete missions, often with additional objectives, including physical/wireless security, or specific vulnerabilities.
• For this specific position, we are seeking experience in Industrial Control Systems (ICS), Internet of Things (IoT), and Facility-Related Control System (FRCS) environments.
• This position may likely include supporting and conducting other roles within the Red Team, to include{{:}}
• Both Operational Technology (OT) and Information Technology (IT) vulnerability assessments
• Persistent Cyberspace Operations (PCO) adversary emulation
• Acquisition Penetration Testing (APT) via Adversarial Assessments of DoW systems
• Support exercise objectives and training goals as an Opposing Force Aggressor (OFA)
• Assist in the instruction of the customer's Red Team Operations Course (RTOC)
• Plan and execute no-notice and cooperative Red Team operations across enterprise, application, and cloud environments.
• Identify and exploit network, host, and application-level vulnerabilities.
• Develop and refine proof-of-concept exploits and techniques to test defensive measures.
• Produce detailed technical findings and recommendations for remediation.
• Collaborate with defensive and engineering teams to improve detection and response.
• Continuously evolve team tactics, techniques, and procedures (TTPs), documentation, and training materials to reflect emerging adversary behaviors.
• Participate in after-action reviews and contribute to policy and playbook updates.
• Prepare, update, document, and present course materials that cover TTPs.
• Provide support required to maintain the customer's Cybersecurity Service Provider (CSSP) accreditation per the standards, including documentation and technical writing support as needed.
• Considerable travel. Normal schedule is Monday-Friday unless on travel supporting a discrete mission. Approximately 25% of support and schedule is either onsite at Quantico, VA, or on travel. The remainder of the schedule is remote. This can change based on the needs of the customer's mission. During normal schedule and during remote support periods, candidates should be feasibly able to report onsite to Quantico, VA, within two hours.

Minimum Qualifications

• TS/SCI eligibility
• 5 years of relevant cybersecurity experience (e.g., Red Team, penetration testing, vulnerability research, security engineering, incident response, detection engineering, etc.).
• Possess and maintain a DoD 8570 IAT Level III certification{{:}} SecurityX (CASP+), CISSP, CCNP Security, CISA, GCED, GCIH, CCSP.
• Possess and maintain a DoD 8570 CSSP Auditor certification{{:}} CySA+, CEH, CISA, GSNA, CFR, PenTest.
• Possess and maintain one of the following certifications to meet DoD 8140 DCWF 541 Vulnerability Assessment Analyst certification requirements{{:}} CySA+, SecurityX (CASP+), CISM, CISA, CISSP, CFR, GPEN, GSNA.
• Understanding of Windows and Linux systems, networking fundamentals, and enterprise services (e.g., Active Directory).
• Once placed in this role, candidates must pass the customer's Red Team Operations Course (RTOC) at the Red Team Certified Professional (RTCP) level upon the first attempt of the RTOC. Depending on timing and schedule of this course, course availability may or may not be immediate after starting the position.

Preferred Qualifications

• Experience with any of the following{{:}}
• AV/EDR evasion and detection-bypass techniques.
• Custom tooling, payload or, command-and-control (C2) development.
• Software development in C, C++, or a similar language.
• Malware analysis and reverse engineering.
• Cloud platforms and services (AWS, Azure, GCP).
• Physical security assessments or red-team intrusion exercises.
• Industrial control systems (ICS) and Internet of Things (IoT) environments.
• Offensive-security certifications such as OSCP, OSEP, OSCE, CRTO. CRTL, GXPN.

Benefits

At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.

RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. We offer Monday to Friday full-time day shift work, and can assist in paid relocation. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.

Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements. The current salary range for this position will be $150,000 to $165,000 (annually).

#IND123