Cyber Red Team Lead Operator (Active Secret Clearance, Pt. Hueneme, CA)

The main function of the Red Team is to rigorously evaluate by imitating adversarial threat actors and test the security of an infrastructure by deploying technologies, both software and hardware. This involves exploiting vulnerabilities on Facility Related Control Systems (FRCS) and Industrial Control Systems (ICS) or the network topology with the ultimate objective of identifying weaknesses and boosting the cybersecurity posture. Efforts will encompass conducting offensive security operations to simulate adversarial tactics and procedures to test preventive, detective, and response controls across various network domains and enterprises.

Upkeeps sustainable facilities, delivers utilities and services, and offers expeditionary combat force capabilities. The establishment of a Red Team (RT) includes the necessity to conduct penetration testing and analytics to strengthen and fortify the cybersecurity posture of facility-related controls.

The ideal candidate for this position would have prior experience in ethical hacking. The candidate will possess experience in assessing and engineering Advanced Persistent Threats (APT), Penetration Testing, Vulnerability Exploitation, attack methodologies, developing and creating exploits, malware manipulation, understanding of attack surface, Cyber Threat Emulation operations, Cyber Advanced Threat Emulation Team operations, and research, identification, and verification of new APT Tactics, Techniques, and Procedures (TTP). This may involve social engineering, phishing attacks, and other methods to gain access to sensitive information or systems. The Red Team Operator will work in collaboration with SOC Analysts or Incident Responders, who are responsible for defending government systems and networks.

Work you’ll do 

• Performing tests of vulnerability and/or authorized exploitation of applications, network devices, and physical infrastructure.
• Conduct internal, external, and remote based penetration testing.
• Design and conduct simulated adversarial engineering attacks with intent to stress the limitations of the cyber security posture.
• Write technical and executive reports. Communicate findings to both technical staff and executive leadership.
• Research and experiment with different types of adversarial attacks.
• Mimic adversarial attack vectors or develop new methodologies for penetration testing.
• Review code for security vulnerabilities.
• Assist with reverse engineering of malware, spam, or other malicious software and TTPs.
• Validate security improvements with additional testing and collaborate with defensive (Blue Team) counterparts.
• Assist with the analysis of log data for anomalies and cybersecurity threats.
• Development of team planning, selection, tasking, risk analysis/management and overall quality assurance of engagement report(s)
• Responsible for ensuring that all activity undertaken meets the scope set by the client, and or, negotiates changes to that scope based on issues identified during an engagement
• Exploiting vulnerabilities and misconfigurations within operating systems, protocols, and networks
• Developing and recommending detailed cyber threat mitigation strategies for customer systems and networks.
• Engineering offensive tool development for use in stand-alone and network-connected systems
• Collaborate with cybersecurity analysts and project managers to prepare operational plans and ensure meticulous execution of security assessments
• Provide detailed vulnerability and assessment reports to technical and non-technical stakeholders, and remediation strategies
• Maintain up-to-date knowledge of cybersecurity trends and threat intelligence to enhance assessment methodologies
• Able to generate threat intelligence indicators during Threat Emulation operations and identify gaps in security posture
• Maintains a comprehensive understanding of the cyber threat landscape, situational awareness of emerging threats, zero days, vulnerabilities and other threats against client systems, networks, and assets including identifying and analyzing cyber threats actors and/or activities

Qualifications

Required:

• Must have an active Secret Clearance to be considered
• Bachelor’s Degree in IT/Cybersecurity related field
• At least five (5) years of experience in