Active Top Secret clearance required; SCI eligibility preferred.
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field, or equivalent practical experience.
5+ years of experience in cybersecurity with hands-on experience in both red team and blue team operations.
Demonstrated experience in offensive security testing, adversary emulation, and penetration testing.
Familiarity with AI-driven security tools and prompt engineering for optimization.
Working knowledge of MITRE ATT&CK and intrusion kill chain concepts.
Experience with vulnerability assessment tools like NESSUS, Nmap, and Metasploit.
Responsibilities
Support advanced security assessments and adversary emulation.
Conduct detection engineering and threat hunting using AI.
Leverage AI to identify zero-day vulnerabilities more efficiently.
Build agentic workflows for triage and detection tuning.
Fine-tune and evaluate security-tuned language models.
Assess AI systems for OWASP LLM Top 10 and AI-specific threats.
Implement security measures for AI systems, including guardrails and monitoring.
Benefits
Comprehensive health and wellness programs.
Flexible work arrangements and remote work options.
Professional development opportunities and training.
Collaborative and innovative work environment.
Support for certifications and further education.
Full Job Description
Everforth ECS is seeking an AI-Focused Red Team/Blue Team Operator to join our team in Washington, DC.
ECS is seeking Top Secret cleared Red/Blue Team Operator with deep expertise in both offensive and defensive cyber operations and a strong understanding of AI-enabled systems, threats, and security controls. This role will support advanced security assessments, adversary emulation, detection engineering, and threat hunting while leveraging AI to reduce time to detect or identify zero-day vulnerabilities
AI/ML Security
Adversarial ML: prompt injection, model evasion, data poisoning, model extraction
LLM red teaming: jailbreaks, indirect injection, RAG poisoning, tool-use abuse
Model and pipeline assessment for OWASP LLM Top 10 and AI-specific threat models
Defending AI systems: guardrails, content filtering, evaluation harnesses, monitoring
Use of AI for offense: agent-driven recon, code analysis, payload generation, recon at scale
Use of AI for defense: anomaly detection, alert triage, automated enrichment, LLM-assisted hunting
AI Engineering & Automation
Building agentic workflows for triage, detection tuning, and report generation
Fine-tuning and evaluation of security-tuned language models
Core Technical Foundations
Secure use of AI coding assistants and code-review for AI-generated output
Certifications / Training (suggested)
AI security coursework (e.g., AI security fundamentals, LLM red teaming labs)
Salary Range: $160,000 - $205,000
General Description of Benefits
Active Top Secret clearance required; SCI eligibility preferred.
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field, or equivalent practical experience.
5+ years of experience in cybersecurity with meaningful hands-on experience in both red team and blue team operations.
Demonstrated experience with:
Offensive security testing, adversary emulation, or penetration testing
Defensive operations, vulnerability analysis and threat hunting
Prompt engineering to optimize AI-driven security tools, and familiarity with prompt injection/jailbreaking defensive mitigation strategies.
Windows, Linux, Active Directory, cloud environments, and enterprise networks
Security tooling such as vulnerability assessment tools, and attack simulation frameworks
Working knowledge of MITRE ATT&CK, intrusion kill chain concepts, and adversary behaviors.
Experience leveraging AI enabled tools, assessing or securing AI/ML systems, large language model integrations, or AI-enabled applications.
Experience performing vulnerability assessments using one or more of the following:
NESSUS
Nmap
Tenable
Kali
Burp, Metasploit, Core Impact
Strong understanding of security principles related to identity, access management, segmentation, logging, incident response, and secure architecture.
Ability to communicate highly technical issues clearly to both technical and non-technical stakeholders.
U.S. citizenship required due to clearance requirements.
About ECS
ECS is a leading provider of digital solutions and services to the federal government. The company was founded in 2001 by Roy Kapani and has since grown to become a trusted partner to a wide range of government agencies. ECS offers a broad range of services, including cloud computing, cybersecurity, and artificial intelligence. The company has been recognized for its innovative solutions and has won numerous awards, including the AWS Public Sector Partner of the Year award.
