Senior Red Team Operator

Description

At B&A, we foster and embrace a distinct set of values that we live by and instill in all aspects of our organization: dedication, commitment, partnership, trust, and recognition. We have incorporated these values into successful delivery for our customers since 1988. B&A believes in ensuring its employees feel deeply connected to B&A, recognizing successes and hard work, and providing continuous opportunities to learn and grow.

Our people are entrepreneurial thinkers that combine mindset, vision, and experience to drive value – not only to us as an organization, but to the clients we support. We promote a collaborative culture with our clients, and with each other, as one team working towards a common vision. We’d love for you to join our team!

Intelligent Waves, a B&A company is looking for a Senior Red Team Operator to support a federal government client in support of an important mission. The Senior Red Team Operator will provide contractor services for a U.S. Courts contract. This is a hybrid position - 80% remote - reporting once weekly to an office next door to Union Station in Washington, D.C. 100% reimbursement of commuting expenses for parking, MARC, VRE or Metro is provided.

• Lead mission-critical Red Team cybersecurity exercises that comprehensively test and fortify production IT infrastructure, physical facilities, and personnel within federal court systems, ensuring the highest standards of national security.
• Develop and conduct spear phishing campaigns to gain internal network access.
• Conduct exploitation of external-facing assets to gain internal network access.
• Conduct post-exploitation actions toward exercise objectives.
• Conduct on-site physical penetration assessments at various federal courthouses and other Court locations to obtain internal network access.
• Use custom code and/or commercial-off-the-shelf (COTS) exploitation frameworks to bypass and penetrate network and system defenses.
• Comply with unique rules of engagement (ROE) for each exercise, along with standard operating procedures (SOP) for Red Team operations.
• Employ Red Team tradecraft while conducting exercises.

• Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience.
• Minimum 2 years technical red team leadership experience (non-overlapping).
• Minimum 3 years of hands-on experience modifying and customizing red teaming software frameworks (Cobalt Strike, Kali, etc.).
• Minimum 2 years independently conducting every phase of a red team exercise without supervision.
• Minimum 2 years developing payloads that bypass A/V and EDR solutions.
• Minimum 2 years mentoring junior and mid-level operators on red team tradecraft and advanced knowledge.
• Minimum 2 years delivering technical red team reports and briefings.
• Must have Red Team web applications experience.
• CRTO certification required within 90 days of start date.
• Experience with Static Application Security Testing (SAST)/Dynamic Application Security Testing (DAST) and integrating results into developer workflows.
• Knowledge of OWASP Top 10 & SANS Top 25 vulnerabilities, with ability to exploit/remediate.
• Application security testing for web, mobile, and API endpoints.

• Public Trust - Applicants selected for this position will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Only U.S. citizens are eligible for a security clearance. For this position, we will consider only applicants with current security clearances and those eligible to obtain one.

$135,000 - $154,000

• Employees must be able…