Interactive -Net Operator; ION

Summary

An exciting opportunity at Andrews AFB, MD, to work full-time assisting a law enforcement/ counterintelligence organization in conducting Interactive On-Net (ION) investigations/ operations. The selected candidate will join a small, talented, highly effective performing team providing cyber threat identification and pursuit expertise to address the unique challenges faced in global cyber investigations and operations. GITI is looking for a motivated, talented, and creative ION operator with experience in conducting sophisticated and effective cyber threat discovery, collection, analysis, and pursuit operations to join our team!

Global Info Tek Inc. is looking for an experienced Interactive On-Net (ION) Operator to assist in threat discovery and pursuit for a cyber investigations division of a law enforcement/counterintelligence agency.

A successful candidate will have experience, skills, and a creative talent to operate effectively alone or within a small team environment to help protect critical cyber infrastructure from evolving cyber threats and nefarious actions from adversaries.

• Conduct interactive on-net operations to gather data from adversary information systems and networks
• Use open-source and proprietary tools for network navigation, tactical forensic analysis, and intelligence collection
• Assist in the development of exploitation capabilities against known and newly identified targets; inform and refine operational requirements for new tools
• Assess multiplex challenges and work with a diverse team to quickly meet evolving mission requirements

• Graduate of the Future Operator Readiness, Growth and Enrichment (FORGE), or a graduate of the Offensive Security Certified Professional (OSCP), or a graduate of the Remote Interactive Operator Trai
• Three years of pen-testing/red teaming experience within the last five years, and at least six years of technical analysis, military intelligence, DNI, SIGINT analysis, or similar
• Strong understanding of system administration (Windows and
  * nix), analysis, and manipulation, including startup programs, system configuration files, common executable files, and logging capabilities
• Solid familiarity with networking analysis and manipulation, including network stack, ports, protocols, tunneling, routing concepts, firewalls, VPNs, proxy servers, and network mapping
• Established knowledge of hacker and pen testing methodologies such as host enumeration, exploitation, privilege escalation, persistence, and effects
• Robust understanding of detection evasion (antivirus, IDS/IPS, and other personal security products) and other post-operation steps
• Ability to assist in the development and adaptation of exploits for operating systems, applications, and services to fit operational needs

• Bachelors or master’s degree in computer science, software engineering, cybersecurity, or a related discipline from an accredited institution in addition to the required experience
• Certifications such as SANS’ GXPN, GAWN, GPYC, GIAC’s GPEN;
  Offensive Security OSCP, OSWE, OSCE, OSEE, ECCouncil’s CEH, APT, LPT, CompTIA’s Pen Test+, CASP+, Cisco’s Cyber Ops, CCNA, CCNP, or other si
• Experience with Python, Power Shell, or other scripting languages to automate operational requirements
• Ability to develop and adapt exploits for operating systems, applications, and services

Global Info Tek, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or based on disability.