Red Team Operator

Leidos•Springfield, VA

About The Position

At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainable. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business. If this sounds like the kind of environment where you can thrive, keep reading! The Digital Modernization Sector brings together our digital transformation and IT programs, allowing us to better serve our customers through scale and repeatability. The mission of the DHS Chief Information Security Officer Directorate (DHS CISOD) is to support the Department’s implementation of all applicable regulatory requirements—including the Federal Information Security Modernization Act (FISMA), relevant OMB circulars, Executive Orders, Federal laws, directives, policies, and regulations—while providing the Department of Homeland Security (DHS) a secure and trusted computing environment. Information security is an essential business function, critical to enabling DHS to conduct its operations and deliver service to the public. We are seeking a highly skilled and experienced individual to join our cybersecurity team as a Red Team Operator. In this role, you will be responsible for conducting advanced penetration testing and red team exercises to identify and exploit vulnerabilities in our organization's systems, network, and applications. The ideal candidate will bring deep technical expertise, proven experience in vulnerability research and exploitation, and the ability to work as part of a collaborative offensive security team.

Requirements

Bachelor’s degree in a related discipline and 12 years of professional experience, or Master’s degree and 10 years of professional experience.
Minimum of 3 years of experience in penetration testing
Experience with at least 3 of the following tools: Kali Linux Metasploit Burp Suite Nmap Cobalt Strike Bloodhound Responder Tenable Nessus WebInspect Scuba AppDetective
Must hold one or more of the following certifications: GPEN, GWAPT, GISF, GXPN, OSCP, OSCE, OSWP, OSEE, CISSP, or CEH.
U.S. Citizenship required; must be able to obtain DHS Public Trust and EOD clearance.

Nice To Haves

Prior DHS IT security or audit experience.
Previous system administration experience.
Familiarity in at least one of the following languages: Python PowerShell Go Ruby
Familiarity with common payload obfuscation techniques
Malware Analysis experience
7+ years of IT experience in a Computer Science discipline.

Responsibilities

Develop and execute comprehensive red teaming exercises to simulate real-world cyberattacks against our organization's infrastructure and applications.
Identify weaknesses and vulnerabilities in our systems and network through active exploitation and testing.
Collaborate with the Blue Team and other cybersecurity professionals to enhance our organization's overall security posture.
Provide detailed reports and recommendations for remediation based on the findings of red team exercises.
Stay up-to-date on the latest cybersecurity threats, vulnerabilities, and exploitation techniques to continually improve red team operations.