Senior Red Team Operator
We are looking for a Senior Red Team Operator to support a federal government client in support of an important mission. The Senior Red Team Operator will provide contractor services for a U.S. Courts contract. This is a hybrid position - 80% remote - reporting once weekly to an office next door to Union Station in Washington, D.C. 100% reimbursement of commuting expenses for parking, MARC, VRE or Metro is provided.
Responsibilities (include but are not limited to):
- Lead mission-critical Red Team cybersecurity exercises that comprehensively test and fortify production IT infrastructure, physical facilities, and personnel within federal court systems, ensuring the highest standards of national security.
- Develop and conduct spear phishing campaigns to gain internal network access.
- Conduct exploitation of external-facing assets to gain internal network access.
- Conduct post-exploitation actions toward exercise objectives.
- Conduct on-site physical penetration assessments at various federal courthouses and other Court locations to obtain internal network access.
- Use custom code and/or commercial-off-the-shelf (COTS) exploitation frameworks to bypass and penetrate network and system defenses.
- Comply with unique rules of engagement (ROE) for each exercise, along with standard operating procedures (SOP) for Red Team operations.
- Employ Red Team tradecraft while conducting exercises.
Requirements:
- Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience.
- Minimum 2 years technical red team leadership experience (non-overlapping).
- Minimum 3 years of hands-on experience modifying and customizing red teaming software frameworks (Cobalt Strike, Kali, etc.).
- Minimum 2 years independently conducting every phase of a red team exercise without supervision.
- Minimum 2 years developing payloads that bypass A/V and EDR solutions.
- Minimum 2 years mentoring junior and mid-level operators on red team tradecraft and advanced knowledge.
- Minimum 2 years delivering technical red team reports and briefings.
- Must have Red Team web applications experience.
- CRTO certification required within 90 days of start date.
- Experience with Static Application Security Testing (SAST)/Dynamic Application Security Testing (DAST) and integrating results into developer workflows.
- Knowledge of OWASP Top 10 & SANS Top 25 vulnerabilities, with ability to exploit/remediate.
- Application security testing for web, mobile, and API endpoints.
- Employees must be able to perform the essential functions of this position, with or without accommodation.
- Ability to remain stationary for extended periods while working at a computer.
- Frequently operate standard office equipment, including computers and telephones.
- Ability to communicate effectively in person, by telephone, video conference, and email.
- Occasionally move about the office and lift up to 20 pounds.
- Ability to work the assigned schedule with regular and reliable attendance.
- Ability to travel up to 10% as required.
Education:
ATR is an Equal Opportunity Employer (EOE) who will provide equal employment opportunity to employees and applicants for employment without regard to race, ethnicity, religion, color, sex, pregnancy, national origin, age, veteran status, ancestry, sexual orientation, gender identity or expression, marital status, family structure, genetic information, or mental or physical disability