Senior Red Cyber Operator — DCART / Advanced Red Cyber

Beyond SOF; Fort Belvoir (VA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Beyond SOF is seeking a Senior Red Cyber Operator to join the DCART/Advanced Red Cyber program in a hybrid Arlington area role. The candidate will lead red team assessments, emulate nation-state tradecraft, and deliver findings to senior DoD decision makers.

Requirements include an active TS/SCI clearance, IAT Level III, and hands-on Cobalt Strike experience, with 3+ years in offensive cyber and adversary emulation. Travel about 5% CONUS/OCONUS.

Qualifications

• Active TS/SCI clearance with U.S. citizenship.
• IAT Level III certification or equivalent.
• Hands-on experience with Cobalt Strike in production settings.
• 3+ years of offensive cyber/red team/adversary emulation experience.

Responsibilities

• Lead full-scope red team assessments (planning, execution, reporting).
• Execute offensive operations end-to-end: initial access → privilege escalation → lateral movement → impact/exfiltration.
• Design, tune, and operate Cobalt Strike (required) along with other C2 frameworks (Sliver/Havoc/etc.).
• Adapt payloads and C2 profiles to evade EDR/AV and telemetry.
• Mentor and assess mid-level operators; enforce SOPs and OPSEC discipline.
• Produce technical annexes and executive-level briefings.

Skills

Offensive cyber operations

Red team leadership

Cobalt Strike (hands-on)

Threat emulation

SOPs & OPSEC

Tools

Cobalt Strike

Sliver

Havoc

Job description

Senior Red Cyber Operator — DCART / Advanced Red Cyber

Location: \"Hybrid in Arlington area\"

Clearance: Active TS/SCI required

Travel: ~5% CONUS/OCONUS

The Mission

Join the DoD Cyber Assessment Red Team (DCART) to emulate nation-state adversaries and execute real-world offensive operations against mission-critical DoD infrastructure. Lead teams, shape tradecraft, and deliver findings to senior DoD decision makers.

What You’ll Do

• Lead full-scope red team assessments (planning, execution, reporting).


• Execute offensive operations end-to-end: initial access → privilege escalation → lateral movement → impact/exfiltration.


• Design, tune, and operate Cobalt Strike (required)along with other C2 frameworks (Sliver/Havoc/etc.).


• Adapt payloads and C2 profiles to evade EDR/AV and telemetry.


• Mentor and assess mid-level operators; enforce SOPs and OPSEC discipline.


• Produce technical annexes and executive-level briefings.

Required

• ActiveTS/SCI(U.S. citizen).


• IAT Level IIIcertified (or equivalent).


• Hands-on, production experience with Cobalt Strike (MUST).


• 3+ years of offensive cyber/red team/adversary emulation experience and ability to pass DCART Senior Operator Aptitude Assessment.

Nice-to-Have

• RTAC, RTJC, CRTO, OSEP, OSEE, OSCP, GXPN, GPEN, GWAPT.


• Experience across OT/ICS, IoT, and wireless target sets.