Red Team Tester; Mid

Valiant Solutions is seeking a Red Team Tester – Mid to independently perform authorized adversarial assessments of our government customer's systems, applications, networks, APIs, and cloud environments. You will develop and execute realistic attack scenarios aligned with the MITRE ATT&CK framework, identify exploitable attack paths that automated vulnerability scanning does not reveal, and evaluate how well defensive controls detect and respond.

You will turn technical results into actionable findings and remediation recommendations, and you will guide less-experienced testers through technical mentoring and peer review.

Named one of the Washington Business Journal's
Best Places to Work
every year since 2014
, Valiant is proud of our employee-centric culture and commitment to excellence.

Location: Remote with ad hoc travel to the Washington DC Metro area.

This position allows for 100% remote work. Remote work requires a high level of trust in our employees, and we strictly adhere to the details outlined in our Remote Work Policy below.

Required Clearance: Must be able to obtain and maintain a Public Trust clearance

Eligibility Requirements: U.S. citizenship is required to obtain the necessary clearance for this position.

Required Experience:

• At least 5 years of experience in the subject area.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related field.
• A senior industry professional certification such as Certified Information Systems Security Professional (CISSP) or equivalent.
• Demonstrated experience conducting penetration testing, red team assessments, or offensive security testing.
• Hands-on experience testing enterprise networks, applications, APIs, or cloud environments.
• Knowledge of common exploitation techniques and attack paths across Windows and Linux environments.
• Working knowledge of MITRE ATT&CK and penetration testing methodologies.
• Experience with tools such as Burp Suite, Nmap, Metasploit, Kali Linux, Wireshark, Nessus/Tenable, Blood Hound, or comparable offensive security tools.
• Scripting experience in Python, Power Shell, Bash, or similar languages.
• Exposure to AWS cloud security testing.
• Additional offensive security certifications such as OSCP, PNPT, eJPT, CEH, or Security+.
• Experience translating technical testing results into well-supported findings and remediation recommendations.
• Familiarity with NIST SP 800-115.

Responsibilities:

• Plan and execute red team test scenarios consistent with the approved rules of engagement (ROE), scope, objectives, and testing methodology.
• Conduct reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, persistence, and other authorized adversarial activities.
• Develop attack scenarios and tactics, techniques, and procedures (TTPs) aligned with relevant threat actors and the MITRE ATT&CK framework.
• Conduct network, web application, API, identity and access, and cloud security testing as assigned.
• Evaluate combinations of vulnerabilities and configuration weaknesses to identify attack paths that automated vulnerability scanning may not reveal.
• Develop or modify scripts, tools, payloads, and testing techniques as each assessment requires.
• Document testing procedures, evidence, vulnerabilities, attack chains, risk, and remediation recommendations.
• Contribute to red team assessment plans and to preliminary and final assessment reports.
• Participate in purple team activities with defensive and security operations center (SOC) personnel to compare attacker activity with security telemetry, detections, and defensive response.
• Validate remediation actions and perform targeted retesting when required.
• Support less-experienced testers through technical guidance and peer…