Red Team Operator

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.

Sentar is seeking a Red Team Operator!

We are seeking a highly skilled Red Team Operational Vulnerability Assessor (OVA)/Operator to join one of only eleven Department of War (DoW) Red Teams certified by the National Security Agency (NSA) and accredited by United States Cyber Command (USCYBERCOM). This team is based out of Quantico, VA. This is a unique opportunity to work on advanced cyber operations, contributing directly to national security.

You will be part of an elite team, leveraging state-of-the-art tools and methodologies to stay ahead of adversaries.

Primary role will be to plan and conduct Operational Vulnerability Assessments (OVA) of the security and defense of Operational Technology (OT) during discrete missions, often with additional objectives, including physical/wireless security, or specific vulnerabilities.

This position may likely include supporting and conducting other roles within the Red Team, to include:

• Both Operational Technology (OT) and Information Technology (IT) vulnerability assessments
• Persistent Cyberspace Operations (PCO) adversary emulation
• Acquisition Penetration Testing (APT) via Adversarial Assessments of DoW systems
• Support exercise objectives and training goals as an Opposing Force Aggressor (OFA)
• Assist in the instruction of the customer's Red Team Operations Course (RTOC)

Plan and execute no-notice and cooperative Red Team operations across enterprise, application, and cloud environments.

Identify and exploit network, host, and application-level vulnerabilities.

Develop and refine proof-of-concept exploits and techniques to test defensive measures.

Produce detailed technical findings and recommendations for remediation.

Collaborate with defensive and engineering teams to improve detection and response.

Continuously evolve team tactics, techniques, and procedures (TTPs), documentation, and training materials to reflect emerging adversary behaviors.

Participate in after-action reviews and contribute to policy and playbook updates.

Prepare, update, document, and present course materials that cover TTPs.

Provide support required to maintain the customer’s Cybersecurity Service Provider (CSSP) accreditation per the standards, including documentation and technical writing support as needed.

Considerable travel. Normal schedule is Monday-Friday unless on travel supporting a discrete mission. Approximately 25% of support and schedule is either onsite at Quantico, VA, or on travel. The remainder of the schedule is remote. This can change based on the needs of the customer's mission. During normal schedule and during remote support periods, candidates should be feasibly able to report onsite to Quantico, VA, within two hours.

• Possess and maintain a DoD 8570 IAT Level III certification:
  SecurityX (CASP+), CISSP, CCNP Security, CISA, GCED, GCIH, CCSP.
• Possess and maintain a DoD 8570 CSSP Auditor certification:
  CySA+, CEH, CISA, GSNA, CFR, Pen Test.
• Possess and maintain one of the following certifications to meet DoD 8140 DCWF 541 Vulnerability Assessment Analyst certification requirements:
  CySA+, SecurityX (CASP+), CISM, CISA, CISSP, CFR, GPEN, GSNA.

• 5 years of relevant cybersecurity experience (e.g., Red Team, penetration testing, vulnerability research, security engineering, incident response, detection engineering, etc).
• Familiarity with common offensive security tooling (Cobalt Strike, Metasploit, Kali Linux, Sliver, Blood Hound, etc .).
• Familiarity with MITRE ATT&CK and…