Red Team Operator SME & Infrastructure Engineer

Overview: Responsibilities:

Minimum of 4 years of hands-on network administration and systems administration experience:

• Developing, automating, and deploying red team exercise infrastructure.
• Deploying, configuring, and maintaining routers, switches, and firewalls.
• Securing red team exercise infrastructure from unauthorized access.
• Securing red team exercise infrastructure against various DCO identification and fingerprinting TTPs.
• Creating, configuring, and administering Active Developing Directory lab environments.
• Creating, modifying, and deleting user accounts, groups, computer accounts, organizational units (OUs), and other objects in the directory service database.
• Installing new Windows operating systems on lab systems as needed, including installing device drivers and other software required for the systems to operate properly.
• Managing security across the lab environment by deploying new security patches and policies and monitoring activity for signs of intrusion or compromise.

Qualifications:

• Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience (which is to say direct red team operations work and not just that which is in support of red team operations).
•  Minimum 2 years technical red team and/or government computer network exploitation/attack operations leadership experience (note this is distinct experience from the above and cannot overlap).
•  Minimum of 3 years of hands-on experience with using modifying and customizing penetration testing and red teaming software frameworks (Cobalt Strike, Kali, etc.) to meet operational requirements.
•  Minimum of 2 years of independently conducting every phase of a red team exercise on their own without guidance or supervision.
•  Minimum of 2 year of hands-on experience developing payloads that bypass A/V and EDR solutions for use in various phases of a red team exercise.
•  Minimum of 2 years mentoring junior and mid-level operators on red team tradecraft and Advanced Knowledge Requirements (that they possess).
• Minimum of 2 years of experience in professionally delivering technical red team reports and briefings.
•  Must possess or have the ability to obtain CRTO certification within 90 days of start. 
• OSCP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required.