Senior Red Cyber Operator — DCART / Advanced Red Cyber

BeyondSOF; Arlington, Northern (VA, KY); Hybrid; USD 140,000 - 180,000; Full time

Job summary

DoD is seeking a Senior Red Cyber Operator to join the DCART program in a hybrid role around Arlington. You will lead red-team engagements, emulate nation-state adversaries, and deliver findings to senior DoD leaders. A TS/SCI clearance and hands-on Cobalt Strike experience are required.

You will mentor mid-level operators, enforce SOPs and OPSEC discipline, and work across OT/ICS contexts with other C2 frameworks as needed.

Qualifications

• Active TS/SCI clearance required and US citizenship.
• IAT Level III certification or equivalent is required.
• Hands-on production experience with Cobalt Strike is mandatory.
• 3+ years of offensive cyber/red team/adversary-emulation experience.
• Ability to lead teams and pass the DCART Senior Operator Aptitude Assessment.

Responsibilities

• Lead full-scope red team assessments (planning, execution, reporting).
• Execute offensive operations end-to-end: initial access, privilege escalation, lateral movement, exfiltration.
• Design, tune, and operate Cobalt Strike and other C2 frameworks.
• Adapt payloads to evade EDR/AV and telemetry; mentor mid-level operators.
• Produce technical annexes and executive-level briefings.

Skills

Red team operations

Adversary emulation

Team leadership

OPSEC discipline

Threat emulation

Education

IAT Level III certification

Tools

Cobalt Strike

Sliver

Havoc

Job description

Senior Red Cyber Operator DCART / Advanced Red Cyber

Location:"Hybrid in Arlington area"
Clearance:Active TS/SCI required
Travel:~5% CONUS/OCONUS
The Mission
Join the DoD Cyber Assessment Red Team (DCART) to emulate nation-state adversaries and execute real-world offensive operations against mission-critical DoD infrastructure. Lead teams, shape tradecraft, and deliver findings to senior DoD decision makers.
What You'll Do

• Lead full-scope red team assessments (planning, execution, reporting).
• Execute offensive operations end-to-end: initial access privilege escalation lateral movement impact/exfiltration.
• Design, tune, and operate Cobalt Strike (required)along with other C2 frameworks (Sliver/Havoc/etc.).
• Adapt payloads and C2 profiles to evade EDR/AV and telemetry.
• Mentor and assess mid-level operators; enforce SOPs and OPSEC discipline.
• Produce technical annexes and executive-level briefings.

Required

• ActiveTS/SCI(U.S. citizen).
• IAT Level IIIcertified (or equivalent).
• Hands-on, production experience with Cobalt Strike (MUST).
• 3+ years of offensive cyber/red team/adversary emulation experience and ability to pass DCART Senior Operator Aptitude Assessment.

Nice-to-Have

• RTAC, RTJC, CRTO, OSEP, OSEE, OSCP, GXPN, GPEN, GWAPT.
• Experience across OT/ICS, IoT, and wireless target sets.