Senior Red Team Operator

ABOUT PRISM
PRISM is devoted to modernization and innovation across technology, security, and IT enterprise solutions. We are recognized for meeting performance requirements and exceeding customer expectations since 1994. Our culture is founded on relationships, opportunity, and success. Offering comprehensive benefit plans including medical, dental, vision, and 401K along with our people - first approach sustains our reputation as a premier employer.

PRISM is seeking a Senior Red Team Operator to support a critical Federal customer. This is a hybrid position with 1 day on site in Washington, DC.

RESPONSIBILITIES:

• Lead mission-critical Red Team cybersecurity exercises that comprehensively test and fortify production IT infrastructure, physical facilities, and personnel within federal court systems, ensuring the highest standards of national security.
• Develop and conduct spear phishing campaigns to gain internal network access.
• Conduct exploitation of external-facing assets to gain internal network access.
• Conduct post-exploitation actions toward exercise objectives.
• Conduct on-site physical penetration assessments at various federal courthouses and other Court locations to obtain internal network access.
• Use custom code and/or commercial-off-the-shelf (COTS) exploitation frameworks to bypass and penetrate network and system defenses.
• Comply with unique rules of engagement (ROE) for each exercise, along with standard operating procedures (SOP) for Red Team operations.
• Employ Red Team tradecraft while conducting exercises.

REQUIRED QUALIFICATIONS (SKILLS/EDUCATION):

• Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience.
• Minimum 2 years technical red team leadership experience (non-overlapping).
• Minimum 3 years of hands-on experience modifying and customizing red teaming software frameworks (Cobalt Strike, Kali, etc.).
• Minimum 2 years independently conducting every phase of a red team exercise without supervision.
• Minimum 2 years developing payloads that bypass A/V and EDR solutions.
• Minimum 2 years mentoring junior and mid-level operators on red team tradecraft and advanced knowledge.
• Minimum 2 years delivering technical red team reports and briefings.
• Must have Red Team web applications experience.
• CRTO certification required within 90 days of start date.
• Experience with Static Application Security Testing (SAST) / Dynamic Application Security Testing (DAST) and integrating results into developer workflows.
• Knowledge of OWASP Top 10 & SANS Top 25 vulnerabilities, with ability to exploit/remediate.
• Application security testing for web, mobile, and API endpoints.

REQUIRED SECURITY CLEARANCE:
Ability to obtain and hold a Public Trust clearance

PRISM is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.