Sixgeninc
Senior Red Team Operator
Hybrid. Posted 14 months ago
The role
You will simulate real-world cyberattacks to assess security controls and incident response capabilities. You will conduct reconnaissance, exploitation, and post-exploitation activities using adversary tactics, techniques, and procedures.
What you will do
- Simulate real-world cyberattacks to assess and challenge the effectiveness of security controls and incident response capabilities.
- Conduct reconnaissance, exploitation, and post-exploitation activities using adversary tactics, techniques, and procedures (TTPs).
- Develop and use custom tools and methods to evade detection and maintain stealth during engagements.
- Collaborate with blue and purple teams to improve detection, response, and overall security posture.
- Document findings and deliver clear, actionable reports to technical and executive stakeholders.
Required qualifications
- US Citizen with the ability to obtain a Public Trust clearance.
- CRTO certification.
- Minimum 6 years of hands-on technical red team or government offensive cyber operations experience, plus 2 years leading such operations (non-overlapping).
- At least 2 years of independently executing complete red team engagements, from planning through post-exploitation, without supervision.
- 3+ years modifying/red-teaming tools (e.g., Cobalt Strike, Kali).
- 2+ years developing payloads to bypass A/V and EDR defenses.
- Experience performing engagements on cloud, hybrid, multi- and/or single-tenant active directory environments.
- In-depth knowledge and experience with Windows and *NIX-based operating systems, networking concepts, and Active Directory.
- Experience building offensive capabilities or tools to enhance red team operations with programming languages such as, but not limited to, C#, C, Python, PowerShell, Bash, terraform, ansible, etc.
- Minimum 2 years mentoring junior operators in red team tradecraft.
- 2 years delivering professional technical reports and executive briefings.
Nice to have
- CRTL
- OSEP
- OSCE
- OSEE
- GXPN
- GPEN
Benefits
- Employer-paid health insurance premiums (medical, dental, vision) for you and your family
- Employer-paid short/long term disability insurance and basic life/AD&D insurance
- 401K with a 4% employer contribution
- Professional development reimbursement options available (training, certification, education, etc)
- Flexible and remote work policies for most positions
- Flexible PTO and holiday schedule
Before you apply
- US Citizen with the ability to obtain a Public Trust clearance.
About the company
SIXGEN delivers agile, mission-ready cybersecurity solutions to empower government and critical infrastructure organizations. They support cyber and intelligence missions by serving government and commercial organizations.