Senior Red Team Operator: Adversary-Emulation Campaigns

CACI International Inc.; Northern (KY); Hybrid; USD 90,000 - 190,000; Full time

Benefits offered by this job

Healthcare

Wellness benefits

Financial benefits

Retirement plan

Family support

Continuing education

Paid time off

Job summary

CACI International Inc. is seeking a Senior Red Team Operator to lead adversary-emulation engagements against federal-style assets. You will translate threat behavior into safe, realistic campaigns, design multi-vector attack campaigns, and oversee secure infrastructure with strict OPSEC.

You’ll mentor junior operators and produce high-quality evidence, reports, and customer out-briefs. The role requires five+ years in red-team/defensive emulation, expertise in C2, cloud, AD, Windows/Linux

Qualifications

• Five or more years of hands-on red-team or advanced penetration testing experience, including two years leading defensive detection engineering activities.
• Campaign-planning across recon, initial access, privilege escalation, lateral movement, persistence, C2, defense evasion, exfiltration.
• Proficiency with C2 frameworks, adversary infrastructure, and cloud attack paths.

Responsibilities

• Lead assigned red-team engagements from scenario design through infrastructure build, execution, deconfliction, reporting, and out-briefs.
• Develop multi-vector campaigns aligned to MITRE ATT&CK and APT profiles.
• Design and oversee adversary infrastructure, redirectors, C2 channels, payload delivery, logging, and teardown.
• Lead hands-on execution of identity, endpoint, network, cloud, phishing, defense evasion, persistence, and exfiltration simulations.
• Mentor junior operators, review tradecraft, enforce OPSEC, and make real-time technical decisions.

Skills

C2 frameworks

Active Directory/Entra ID

Windows/Linux tradecraft

Cloud attack paths

Operator scripting

OPSEC and safety controls

Technical report writing

Purple-team facilitation

PowerShell

Education

OSEP/OSCE

OSCP

GXPN

GPEN

CRTO/CRTL

CRTP

OSED

Tools

Sliver

Mythic

Havoc

Job description

CACI International Inc. is seeking a Senior Red Team Operator to lead adversary-emulation engagements against federal-style assets. You will translate threat behavior into safe, realistic campaigns, design multi-vector attack campaigns, and oversee secure infrastructure with strict OPSEC.

You’ll mentor junior operators and produce high-quality evidence, reports, and customer out-briefs. The role requires five+ years in red-team/defensive emulation, expertise in C2, cloud, AD, Windows/Linux