OverviewIntelligent Waves currently has a need for a
Red Team Operator SME & Infrastructure Engineer. The
Red Team Operator SME & Infrastructure Engineer will provide advanced red team operational and infrastructure engineering support in support of mission requirements. This is a hybrid position-80% remote-reporting once weekly to an office next door to Union Station in Washington, DC.
IW reimburses 100% of commuting expenses for parking, MARC, VRE, or Metro.Location: National Capital Region (NCR) - Hybrid (80% remote)
Travel: Ability to travel up to 10% of the time; reimbursed based on IW policy, GSA Per Diem rates, and DoD Joint Travel Regulations (JTR) as required.
Clearance Requirement: Must be a United States Citizen and be able to obtain and hold a Public Trust clearance.
Compensation Range: $165,000-$175,000
Adherence to all customer site protocols is mandatory for employees.
ResponsibilitiesMinimum of 4 years of hands-on network administration and systems administration experience required:
- Developing, automating, and deploying red team exercise infrastructure - including Ubiquiti, Promox, Kubernetes and Ansible, Apache/NGINIX, and GOCD for CI/CD.
- Deploying, configuring, and maintaining routers, switches, and firewalls.
- Securing red team exercise infrastructure from unauthorized access.
- Securing red team exercise infrastructure against various DCO identification and fingerprinting TTPs.
- Creating, configuring, and administering Active Directory lab environments.
- Creating, modifying, and deleting user accounts, groups, computer accounts, organizational units (OUs), and other objects in the directory service database.
- Installing new Windows and Linux operating systems on lab systems as needed, including installing device drivers and other software required for the systems to operate properly.
- Managing security across the lab environment by deploying new security patches and policies and monitoring activity for signs of intrusion or compromise.
- Maintaining infrastructure for VPN access.
Qualifications- Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience (which is to say direct red team operations work and not just that which is in support of red team operations).
- Minimum 2 years technical red team and/or government computer network exploitation/attack operations leadership experience (note this is distinct experience from the above and cannot overlap).
- Minimum of 3 years of hands-on experience with using modifying and customizing penetration testing and red teaming software frameworks (Cobalt Strike, Kali, etc.) to meet operational requirements.
- Minimum of 2 years of independently conducting every phase of a red team exercise on their own without guidance or supervision.
- Minimum of 2 year of hands-on experience developing payloads that bypass A/V and EDR solutions for use in various phases of a red team exercise.
- Minimum of 2 years mentoring junior and mid-level operators on red team tradecraft and Advanced Knowledge Requirements (that they possess).
- Minimum of 2 years of experience in professionally delivering technical red team reports and briefings.
- Must possess or obtain the CRTO certification within 90 days of start date.
- OSCP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required.
