Job Requirements
Remote Washington, DC
Public Trust Polygraph not specified
Mid Level Career (5+ yrs experience)
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Job Summary
EGS is looking for a Senior Red Team Operator to support a federal government client in support of an important mission. The Senior Red Team Operator will provide contractor services for a U.S. Courts contract. This is a hybrid position - 80% remote - reporting once weekly to an office next door to Union Station in Washington, D.C. 100% reimbursement of commuting expenses for parking, MARC, VRE or Metro is provided.
Responsibilities
Lead mission-critical Red Team cybersecurity exercises that comprehensively test and fortify production IT infrastructure, physical facilities, and personnel within federal court systems, ensuring the highest standards of national security.
Develop and conduct spear phishing campaigns to gain internal network access.
Conduct exploitation of external-facing assets to gain internal network access.
Conduct post-exploitation actions toward exercise objectives.
Conduct on-site physical penetration assessments at various federal courthouses and other Court locations to obtain internal network access.
Use custom code and/or commercial-off-the-shelf (COTS) exploitation frameworks to bypass and penetrate network and system defenses.
Comply with unique rules of engagement (ROE) for each exercise, along with standard operating procedures (SOP) for Red Team operations.
Employ Red Team tradecraft while conducting exercises.
Required Skills
Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience.
Minimum 2 years technical red team leadership experience (non-overlapping).
Minimum 3 years of hands-on experience modifying and customizing red teaming software frameworks (Cobalt Strike, Kali, etc.).
Minimum 2 years independently conducting every phase of a red team exercise without supervision.
Minimum 2 years developing payloads that bypass A/V and EDR solutions.
Minimum 2 years mentoring junior and mid-level operators on red team tradecraft and advanced knowledge.
Minimum 2 years delivering technical red team reports and briefings.
Must have Red Team web applications experience.
CRTO certification required within 90 days of start date.
Experience with Static Application Security Testing (SAST)/Dynamic Application Security Testing (DAST) and integrating results into developer workflows.
Knowledge of OWASP Top 10 & SANS Top 25 vulnerabilities, with ability to exploit/remediate.
Application security testing for web, mobile, and API endpoints.
Security Clearance
Public Trust - Applicants selected for this position will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Only U.S. citizens are eligible for a security clearance. For this position, we will consider only applicants with current security clearances and those eligible to obtain one.
EGS is looking for a Senior Red Team Operator to support a federal government client in support of an important mission. The Senior Red Team Operator will provide contractor services for a U.S. Courts contract. This is a hybrid position - 80% remote - reporting once weekly to an office next door to Union Station in Washington, D.C. 100% reimbursement of commuting expenses for parking, MARC, VRE or Metro is provided.
Responsibilities
Lead mission-critical Red Team cybersecurity exercises that comprehensively test and fortify production IT infrastructure, physical facilities, and personnel within federal court systems, ensuring the highest standards of national security.
Develop and conduct spear phishing campaigns to gain internal network access.
Conduct exploitation of external-facing assets to gain internal network access.
Conduct post-exploitation actions toward exercise objectives.
Conduct on-site physical penetration assessments at various federal courthouses and other Court locations to obtain internal network access.
Use custom code and/or commercial-off-the-shelf (COTS) exploitation frameworks to bypass and penetrate network and system defenses.
Comply with unique rules of engagement (ROE) for each exercise, along with standard operating procedures (SOP) for Red Team operations.
Employ Red Team tradecraft while conducting exercises.
Required Skills
Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience.
Minimum 2 years technical red team leadership experience (non-overlapping).
Minimum 3 years of hands-on experience modifying and customizing red teaming software frameworks (Cobalt Strike, Kali, etc.).
Minimum 2 years independently conducting every phase of a red team exercise without supervision.
Minimum 2 years developing payloads that bypass A/V and EDR solutions.
Minimum 2 years mentoring junior and mid-level operators on red team tradecraft and advanced knowledge.
Minimum 2 years delivering technical red team reports and briefings.
Must have Red Team web applications experience.
CRTO certification required within 90 days of start date.
Experience with Static Application Security Testing (SAST)/Dynamic Application Security Testing (DAST) and integrating results into developer workflows.
Knowledge of OWASP Top 10 & SANS Top 25 vulnerabilities, with ability to exploit/remediate.
Application security testing for web, mobile, and API endpoints.
Security Clearance
Public Trust - Applicants selected for this position will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Only U.S. citizens are eligible for a security clearance. For this position, we will consider only applicants with current security clearances and those eligible to obtain one.
group id: 91165794