Red Team Operator and Infrastructure SME

The role

You will simulate adversaries and malicious actors to assess security controls and incident response capabilities. You will also develop, automate, and deploy red team infrastructure.

What you will do

• Simulate real-world cyberattacks to assess security controls and incident response capabilities.
• Conduct reconnaissance, exploitation, and post-exploitation activities using adversary TTPs.
• Develop and use custom tools and methods to evade detection and maintain stealth.
• Collaborate with blue and purple teams to improve security posture.
• Document findings and deliver actionable reports to stakeholders.
• Develop, automate and deploy red team infrastructure.
• Secure infrastructure from unauthorized access and various TTPs.

Required qualifications

• CRTO certification.
• Minimum 4 years of hands-on technical red team or government offensive cyber operations experience.
• 2 years leading such operations (non-overlapping).
• At least 2 years of independently executing complete red team engagements without supervision.
• 3+ years modifying/red-teaming tools (e.g., Cobalt Strike, Kali).
• 2+ years developing payloads to bypass A/V and EDR defenses.
• Experience performing engagements on cloud, hybrid, multi- and/or single-tenant active directory environments.
• In-depth knowledge and experience with Windows and *NIX-based operating systems, networking concepts, and Active Directory.
• Experience building offensive capabilities or tools with programming languages such as C#, C, Python, PowerShell, Bash, terraform, ansible, etc.
• Minimum 2 years mentoring junior operators in red team tradecraft.
• 2 years delivering professional technical reports and executive briefings.

Nice to have

• CRTL
• OSEP
• OSCE
• OSEE
• GXPN
• GPEN

Benefits

• Employer-paid health insurance premiums (medical, dental, vision) for you and your family
• Employer-paid short/long term disability insurance and basic life/AD&M insurance
• 401K with a 4% employer contribution
• Professional development reimbursement options available (training, certification, education, etc)
• Flexible and remote work policies for most positions
• Flexible PTO and holiday schedule

About the company

SIXGEN delivers agile, mission-ready cybersecurity solutions to empower government and critical infrastructure organizations. They combine innovation and deep expertise to protect vital systems.