Minimum 2 years of direct, hands-on technical red team operations experience.
Minimum 2 years of leadership experience in red team or government network exploitation.
At least 2 years of experience customizing penetration testing software frameworks like Cobalt Strike and Kali.
Proven ability to independently conduct all phases of a red team exercise without supervision for at least 2 years.
Experience developing payloads that bypass A/V and EDR solutions for red team exercises for a minimum of 2 years.
Minimum 2 years of mentoring experience for junior and mid-level operators in red team tradecraft.
Experience delivering technical red team reports and briefings for at least 2 years.
Must obtain CRTO certification within 90 days of starting. OSCP, OSCE, OSEE, GXPN, or GPEN certifications are preferred.
Responsibilities
Develop and automate red team exercise infrastructure using tools like Ubiquiti, Promox, and Kubernetes.
Deploy, configure, and maintain network devices such as routers, switches, and firewalls.
Secure red team infrastructure from unauthorized access and various DCO identification techniques.
Create and manage Active Directory lab environments, including user and group management.
Install and configure Windows and Linux operating systems on lab systems as needed.
Manage security by deploying patches and monitoring for signs of intrusion.
Maintain infrastructure for VPN access.
Benefits
100% reimbursement for commuting expenses including parking and public transport.
Hybrid work model with 80% remote flexibility.
Opportunity for professional development and certification support.
Travel expenses reimbursed according to GSA Per Diem rates and DoD regulations.
Full Job Description
Overview
Intelligent Waves currently has a need for a Red Team Operator SME & Infrastructure Engineer. The Red Team Operator SME & Infrastructure Engineer will provide advanced red team operational and infrastructure engineering support in support of mission requirements. This is a hybrid position-80% remote-reporting once weekly to an office next door to Union Station in Washington, DC. IW reimburses 100% of commuting expenses for parking, MARC, VRE, or Metro.
Location: National Capital Region (NCR) - Hybrid (80% remote)
Travel: Ability to travel up to 10% of the time; reimbursed based on IW policy, GSA Per Diem rates, and DoD Joint Travel Regulations (JTR) as required.
Clearance Requirement: Must be a United States Citizen and be able to obtain and hold a Public Trust clearance.
Compensation Range: $165,000-$175,000
Responsibilities
Minimum of 4 years of hands-on network administration and systems administration experience required:
Developing, automating, and deploying red team exercise infrastructure - including Ubiquiti, Promox, Kubernetes and Ansible, Apache/NGINIX, and GOCD for CI/CD.
Deploying, configuring, and maintaining routers, switches, and firewalls.
Securing red team exercise infrastructure from unauthorized access.
Securing red team exercise infrastructure against various DCO identification and fingerprinting TTPs.
Creating, configuring, and administering Active Directory lab environments.
Creating, modifying, and deleting user accounts, groups, computer accounts, organizational units (OUs), and other objects in the directory service database.
Installing new Windows and Linux operating systems on lab systems as needed, including installing device drivers and other software required for the systems to operate properly.
Managing security across the lab environment by deploying new security patches and policies and monitoring activity for signs of intrusion or compromise.
Maintaining infrastructure for VPN access.
Qualifications
Minimum 2 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience (which is to say direct red team operations work and not just that which is in support of red team operations).
Minimum 2 years technical red team and/or government computer network exploitation/attack operations leadership experience (note this is distinct experience from the above and cannot overlap).
Minimum of 2 years of hands-on experience with using modifying and customizing penetration testing and red teaming software frameworks (Cobalt Strike, Kali, etc.) to meet operational requirements.
Minimum of 2 years of independently conducting every phase of a red team exercise on their own without guidance or supervision.
Minimum of 2 year of hands-on experience developing payloads that bypass A/V and EDR solutions for use in various phases of a red team exercise.
Minimum of 2 years mentoring junior and mid-level operators on red team tradecraft and Advanced Knowledge Requirements (that they possess).
Minimum of 2 years of experience in professionally delivering technical red team reports and briefings.
Must possess or obtain the CRTO certification within 90 days of start date.
OSCP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required.
