Full Description

Cyber Red Team Operator (Penetration Testing, Senior Associate) FTE JOB

Location: Patuxent River, Maryland site. Onsite We do pay RELOCATION

Summary Cyber Red Team Operator (Penetration Testing, Senior Associate) to perform on-net adversarial threat emulation (Red Teaming) and penetration testing of platform IT and networks for Event Planning. This facility supports the mission to provide realistic cybersecurity environments for test and evaluation of major DoD acquisition programs and to enable the conduct of realistic training and certification events for the DoD Cyber Mission Force. The NCRC facility may also support non-DoD customers such as Department of Homeland Security (DHS), industry, academia, and international partners. The successful candidate will serve on-site at the Patuxent River, Maryland site. This position currently requires an on-site schedule with 5 days on-site and is eligible for Compressed Work Schedule (CWS). Position may require flexible weekend and/or evening shift work, as needed. Schedule is subject to change based on company/contract requirements. Responsibilities Working closely with our government customer, perform adversarial threat emulation (Red Teaming) and penetration testing to assess the performance of aeronautical systems, subsystems, and equipment (platform IT). Working closely with our government customer, perform adversarial threat emulation (Red Teaming) and penetration testing assessments on government networks including Windows domains, Linux systems, switches, routers, and other connected network devices. Apply and/or develop highly advanced principles, concepts, and tactics. Identify issues and vulnerabilities associated with operational networks and programs. Travel Up to 10% of the time to CONUS sites as required. Required Qualifications At least 10 years of pen testing, red team operations, and/or offensive security experience including experience conducting on-net assessments Experience operating open source and commercial tools such as Metasploit, Burp Suite, Cobalt Strike, NMAP, Core Impact, etc. Working knowledge of IP network protocols, subnetting, routing, switching, etc.

Experience in one or more of the following cybersecurity disciplines

• Penetration testing of modern Windows and Linux operating systems and IP-based networks
• Exploit and malware development targeting modern operating systems and defenses
• Reverse engineering
• Web application penetration testing
• Software development
• Hardware hacking
• Cryptography
• Software defined networks
• Digital forensics
• Control systems
• Radio Frequency (RF)
• Ability to work in a diverse team environment
• Industry certification of EC-Council Certified Ethical Hacker (C|EH) and ISC2 Certified Information Systems Security Professional (CISSP) or their equivalents are required