Cyber Red Team Lead Operator

Clark Creative Solutions is seeking an experienced Cyber Red Team Lead Operator to support NAVFAC cybersecurity operations. The successful candidate will lead and perform authorized penetration testing, cyber threat emulation, vulnerability exploitation, and adversarial security assessments across network environments, Facility-Related Control Systems (FRCS), and Industrial Control Systems (ICS).

This position is ideal for a hands-on cybersecurity professional with experience in ethical hacking, Advanced Persistent Threat (APT) tactics, attack methodologies, exploit development, and threat emulation.

Required Qualifications

5+ years of security operations or industrial control automation/management experience.
Demonstrated leadership experience in customer-facing roles.
Hands-on experience with penetration testing, ethical hacking, vulnerability exploitation, or cyber threat emulation.
Proficiency with Linux and Windows operating systems.
Knowledge of networking protocols including TCP/IP, ICMP, HTTP/S, DNS, SSH, SMTP, and SMB.
Experience with technologies such as Palo Alto, Elastic SIEM, Cribl, Splunk, VMware, and Security Center.
Familiarity with the MITRE ATT&CK framework.
Programming or scripting experience.
Strong technical writing, analytical, troubleshooting, and communication skills.

Desired Skills

Operational Technology (OT) or Industrial Control Systems (ICS) experience.
Experience developing custom exploits or exploitation tools.
Python, Bash, or PowerShell scripting experience.
Experience with BACnet, Modbus, SCADA systems, or PCAP.
Experience applying threat intelligence and current attack vectors to security monitoring and threat-emulation activities.

Preferred Certifications

CEH | OSCP | GPEN | GRTP | CISSP | GCIH | GISF | GXPN | GEVA, or equivalent cybersecurity/IT certifications.