Senior Red Team Lead - Hybrid (80% Remote)

Bart & Associates, LLC; Washington (District of Columbia); Hybrid; USD 135,000 - 154,000; Full time

Benefits offered by this job

Hybrid work model

Commuting reimbursement

Job summary

Bart & Associates, LLC is seeking a Senior Red Team Operator to support a federal government client in Washington, D.C. This hybrid role is 80% remote, with weekly in-office reporting next to Union Station; 100% commuting expenses covered.

You will lead red team exercises, conduct spear phishing, exploitation, and post-exploitation activities, and mentor junior operators while ensuring compliance with ROE and SOP. A U.S. government security clearance is required.

Qualifications

• Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience.
• Minimum 2 years technical red team leadership experience (non-overlapping).
• Minimum 3 years of hands-on experience modifying and customizing red teaming software frameworks (Cobalt Strike, Kali, etc.).
• Minimum 2 years independently conducting every phase of a red team exercise without supervision.
• Minimum 2 years developing payloads that bypass A/V and EDR solutions.
• Minimum 2 years mentoring junior and mid-level operators on red team tradecraft and advanced knowledge.
• Minimum 2 years delivering technical red team reports and briefings.
• Must have Red Team web applications experience.
• Experience with Static Application Security Testing (SAST)/Dynamic Application Security Testing (DAST) and integrating results into developer workflows.
• Knowledge of OWASP Top 10 & SANS Top 25 vulnerabilities, with ability to exploit/remediate.
• Application security testing for web, mobile, and API endpoints.

Responsibilities

• Lead mission-critical Red Team cybersecurity exercises that comprehensively test and fortify production IT infrastructure, physical facilities, and personnel within federal court systems, ensuring the highest standards of national security.
• Develop and conduct spear phishing campaigns to gain internal network access.
• Conduct exploitation of external-facing assets to gain internal network access.
• Conduct post-exploitation actions toward exercise objectives.
• Conduct on-site physical penetration assessments at various federal courthouses and other Court locations to obtain internal network access.
• Use custom code and/or commercial-off-the-shelf (COTS) exploitation frameworks to bypass and penetrate network and system defenses.
• Comply with unique rules of engagement (ROE) for each exercise, along with standard operating procedures (SOP) for Red Team operations.
• Employ Red Team tradecraft while conducting exercises.

Skills

Red Team leadership

Spear phishing

Exploitation techniques

Post-exploitation

Physical security assessments

Technical reporting

Red Team tradecraft

Education

CRTO certification

Tools

Cobalt Strike

Kali Linux

SAST

DAST

Job description

Bart & Associates, LLC is seeking a Senior Red Team Operator to support a federal government client in Washington, D.C. This hybrid role is 80% remote, with weekly in-office reporting next to Union Station; 100% commuting expenses covered.

You will lead red team exercises, conduct spear phishing, exploitation, and post-exploitation activities, and mentor junior operators while ensuring compliance with ROE and SOP. A U.S. government security clearance is required.