Red Cyber Operator (onsite)

Position Description

Join the Defense Threat Reduction Agency (DTRA) as a member of the elite DoD Red Team's newest component, the DTRA Cyber Assessment Red Team (DCART), where you will be at the forefront of assessing vulnerabilities and identifying risks to critical assets and missions. You will challenge protection strategies from an adversarial perspective, providing invaluable insights that drive mission assurance and be key to safeguarding our nation's security.

You will collaborate with top-tier DoD stakeholders, including the Joint Chiefs of Staff and Combatant Commanders, to deliver actionable intelligence that enhances our defense capabilities. Your work will involve both analytical and physical assessments, as well as contributing to the cutting-edge DTRA Cyber Assessment Red Team (DCART). By conducting comprehensive cyber assessments, you will help create a holistic view of adversarial threats, ensuring our national security remains robust and resilient.

This is your chance to make a tangible impact on national defense, working alongside dedicated professionals to prevent, protect, and mitigate threats to our nation's most critical operations. Join us and be part of a mission that truly matters.

Job Description: Red Cyber Operators (RCOs) must be capable of meeting apprentice operator requirements in the DCART Operator Training Program within the prescribed timelines. They are expected to have experience as operators conducting cyber red team assessments, offensive cyber operations, or significant penetration testing experience.

May travel to support assessments CONUS and OCONUS (anticipated ~15%). Must be able to support assessments during non-standard duty hours, to include nights and weekends.

• 2+ years Offensive Cyber experience, DoD Cyber Red Team Experience, or corporate Red Team experience
• Red Team Apprentice Course (RTAC), Red Team Journeyman Course (RTJC), Certified Red Team Operator (CRTO) certification, Offensive Security, Rogue Ops- Red Team 1 (ROPS), Certified Professional (OSCP), Global Information Assurance Certification (GIAC) Exploit Researcher & Advanced Penetration Tester (GXPN), GIAC Penetration Tester (GPEN), and/or GIAC Web Application Penetration Tester (GWAP)
• Expertise in antivirus evasion, EDR evasion, offensive infrastructure, phishing and social engineering campaigns, and/or penetration testing of critical infrastructure, networking, IoT, and wireless devices
• Top Secret SCI Clearance

Desired Skills/Certifications:

• Must hold an IAT Level III certification as defined and described in DoDD 8570.01, 8570.01-M, 8140.01-03, and as amended
• Must pass the DCART operator aptitude test before joining DCART as an Operator. To support as an RCO, candidates are expected to pass a typical red team scenario assessment within a set timeframe. In these scenarios, the operator will encounter one or more domains, likely joined in a forest. The Operator will be required to provide the rid500 administrator hash for each system that the operator gets on. This is designed to evaluate the personnel effectiveness as an operator. The test would be held at the contractor facility, with the test range access being provided by the government.