Senior Red Team Operator

Arena Technical Resources, LLC; Washington (District of Columbia); Híbrido; USD 135.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Commuting expenses reimbursement

Health/Dental insurance

401k plan

Descripción de la vacante

Arena Technical Resources, LLC is seeking a Senior Red Team Operator to support a federal government client. The role is hybrid, 80% remote with weekly reporting to an office near Union Station in Washington, DC. 100% reimbursement of commuting expenses for parking, MARC, VRE or Metro is provided.

The Senior Red Team Operator will lead mission-critical exercises, develop phishing campaigns, and conduct exploitation and post-exploitation activities to test and fortify national security.

Formación

• Minimum 6 years direct, hands-on red team and/or government network operations experience.
• Minimum 2 years technical red team leadership experience (non-overlapping).
• Minimum 3 years of hands-on experience modifying red team software frameworks (Cobalt Strike, Kali, etc.).
• Minimum 2 years independently conducting every phase of a red team exercise without supervision.

Responsabilidades

• Lead mission-critical Red Team cybersecurity exercises across IT, facilities, and personnel.
• Develop and conduct spear phishing campaigns to gain internal access.
• Exploit external-facing assets to gain internal access.
• Perform post-exploitation actions toward exercise objectives.
• Conduct on-site physical penetration assessments at federal courthouses and Court locations to obtain internal access.
• Use custom code and/or COTS frameworks to bypass defenses.
• Adhere to ROE and SOPs for Red Team operations.
• Apply Red Team tradecraft during exercises.

Conocimientos

Red team leadership

Spear phishing

Exploitation techniques

Threat emulation

Mentoring teammates

Educación

Bachelor's Degree

Herramientas

Cobalt Strike

Kali Linux

Descripción del empleo

Job Title: Senior Red Team Operator

Job Location: Hybrid - 80% remote, 20% Washington, D.C.

Compensation: $135,000 - $150,000 Salary, PTO, 401k, Health/Dental, etc.

Eligibility/Clearance: Public Trust - Applicants selected for this position will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Only U.S. citizens are eligible for a security clearance. For this position, we will consider only applicants with current security clearances and those eligible to obtain one.

Job Description:

We are looking for a Senior Red Team Operator to support a federal government client in support of an important mission. The Senior Red Team Operator will provide contractor services for a U.S. Courts contract. This is a hybrid position - 80% remote - reporting once weekly to an office next door to Union Station in Washington, D.C. 100% reimbursement of commuting expenses for parking, MARC, VRE or Metro is provided.

Responsibilities (include but are not limited to):

• Lead mission-critical Red Team cybersecurity exercises that comprehensively test and fortify production IT infrastructure, physical facilities, and personnel within federal court systems, ensuring the highest standards of national security.
• Develop and conduct spear phishing campaigns to gain internal network access.
• Conduct exploitation of external-facing assets to gain internal network access.
• Conduct post-exploitation actions toward exercise objectives.
• Conduct on-site physical penetration assessments at various federal courthouses and other Court locations to obtain internal network access.
• Use custom code and/or commercial-off-the-shelf (COTS) exploitation frameworks to bypass and penetrate network and system defenses.
• Comply with unique rules of engagement (ROE) for each exercise, along with standard operating procedures (SOP) for Red Team operations.
• Employ Red Team tradecraft while conducting exercises.

Requirements:

• Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience.
• Minimum 2 years technical red team leadership experience (non-overlapping).
• Minimum 3 years of hands-on experience modifying and customizing red teaming software frameworks (Cobalt Strike, Kali, etc.).
• Minimum 2 years independently conducting every phase of a red team exercise without supervision.
• Minimum 2 years developing payloads that bypass A/V and EDR solutions.
• Minimum 2 years mentoring junior and mid-level operators on red team tradecraft and advanced knowledge.
• Minimum 2 years delivering technical red team reports and briefings.
• Must have Red Team web applications experience.
• CRTO certification required within 90 days of start date.
• Experience with Static Application Security Testing (SAST)/Dynamic Application Security Testing (DAST) and integrating results into developer workflows.
• Knowledge of OWASP Top 10 & SANS Top 25 vulnerabilities, with ability to exploit/remediate.
• Application security testing for web, mobile, and API endpoints.
• Employees must be able to perform the essential functions of this position, with or without accommodation.
• Ability to remain stationary for extended periods while working at a computer.
• Frequently operate standard office equipment, including computers and telephones.
• Ability to communicate effectively in person, by telephone, video conference, and email.
• Occasionally move about the office and lift up to 20 pounds.
• Ability to work the assigned schedule with regular and reliable attendance.
• Ability to travel up to 10% as required.

Education:

• Bachelors Degree

ATR is an Equal Opportunity Employer (EOE) who will provide equal employment opportunity to employees and applicants for employment without regard to race, ethnicity, religion, color, sex, pregnancy, national origin, age, veteran status, ancestry, sexual orientation, gender identity or expression, marital status, family structure, genetic information, or mental or physical disability