Apply on Employer Site

Intelligent Waves · 1 month ago

Senior Red Team Operator

US-DC-Washington

Full-time

Hybrid

Senior Level

6+ years exp

Intelligent Waves is a company delivering innovative technology solutions to enable a more secure nation, and they are seeking a Senior Red Team Operator to support a critical Federal customer. The role involves leading Red Team cybersecurity exercises, conducting penetration assessments, and developing tactics to fortify IT infrastructure within federal court systems.

Information Technology & Services

Comp. & Benefits

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Lead mission-critical Red Team cybersecurity exercises that comprehensively test and fortify production IT infrastructure, physical facilities, and personnel within federal court systems, ensuring the highest standards of national security

Develop and conduct spear phishing campaigns to gain internal network access

Conduct exploitation of external-facing assets to gain internal network access

Conduct post-exploitation actions toward exercise objectives

Conduct on-site physical penetration assessments at various federal courthouses and other Court locations to obtain internal network access

Use custom code and/or commercial-off-the-shelf (COTS) exploitation frameworks to bypass and penetrate network and system defenses

Comply with unique rules of engagement (ROE) for each exercise, along with standard operating procedures (SOP) for Red Team operations

Employ Red Team tradecraft while conducting exercises

Qualification

Red Team OperationsNetwork ExploitationRed Team LeadershipCustom Exploitation FrameworksPayload DevelopmentSAST/DAST ExperienceOWASP/SANS KnowledgeTechnical ReportingMentoring SkillsCommunication SkillsTeam CollaborationProblem SolvingAdaptability

Required

Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience

Minimum 2 years technical red team leadership experience (non-overlapping)

Minimum 3 years of hands-on experience modifying and customizing red teaming software frameworks (Cobalt Strike, Kali, etc.)

Minimum 2 years independently conducting every phase of a red team exercise without supervision

Minimum 2 years developing payloads that bypass A/V and EDR solutions

Minimum 2 years mentoring junior and mid-level operators on red team tradecraft and advanced knowledge

Minimum 2 years delivering technical red team reports and briefings

CRTO certification required within 90 days of start date

Preferred

Experience with Static Application Security Testing (SAST) / Dynamic Application Security Testing (DAST) and integrating results into developer workflows

Knowledge of OWASP Top 10 & SANS Top 25 vulnerabilities, with ability to exploit/remediate

Application security testing for web, mobile, and API endpoints