Senior Red Team Operator & Threat Emulation SME

CACI; United States; On-site; USD 190,000 - 270,000; Full time

Job summary

CACI is seeking a Senior Red Team Operator and subject-matter expert to lead adversary-emulation engagements across federal cyber assets. You will design campaigns, oversee infrastructure, and ensure safe, credible assessments that drive measurable defensive improvements. You will mentor junior operators, review tooling, and deliver clear technical and executive briefings.

The role requires U.S. citizenship, eligibility for Public Trust, and hands-on experience with modern attack techniques,

Qualifications

• U.S. citizenship is required.
• Eligible for Public Trust (High Risk).
• Work in customer-provided remote environments with rules of engagement.
• 5+ years hands-on red-team or adversary-emulation experience; 2+ years leading teams.
• Campaign planning across recon to exfiltration with MITRE ATT&CK alignment.
• Proficiency with Sliver/Mythic/Havoc and cloud attack architectures.
• Advanced certifications such as OSEP/OSCE, OSCP, GXPN, GPEN, CRTO/CRTL, CRTP, OSED.

Responsibilities

• Lead red-team engagements from design through reporting and customer out-briefs.
• Develop multi-vector campaigns aligned to MITRE ATT&CK profiles.
• Design adversary infrastructure, C2 channels, and payload delivery.
• Construct secure cloud-based attack infrastructure and teardown workflows.
• Lead hands-on execution of advanced identity, endpoint, network, cloud, and phishing simulations.
• Mentor junior operators and enforce OPSEC and safety controls.
• Review tooling for evasion capabilities within authorized scope.
• Coordinate with stakeholders to validate detections and translate observations into improvements.
• Own operator logs, narratives, evidence, and mitigation recommendations.
• Escalate risks and scope changes to the Technical Lead.

Skills

Red team operations

Threat emulation

Windows & Linux tradecraft

Cloud attack paths

OPSEC & safety controls

Scripting / tooling

Education

Advanced certifications (OSEP/OSCE, OSCP, GXPN)

Tools

Sliver

Mythic

Havoc

Job description

CACI is seeking a Senior Red Team Operator and subject-matter expert to lead adversary-emulation engagements across federal cyber assets. You will design campaigns, oversee infrastructure, and ensure safe, credible assessments that drive measurable defensive improvements. You will mentor junior operators, review tooling, and deliver clear technical and executive briefings.

The role requires U.S. citizenship, eligibility for Public Trust, and hands-on experience with modern attack techniques,