Senior Red Team Operator

At B&A, we foster and embrace a distinct set of values that we live by and instill in all aspects of our organization: dedication, commitment, partnership, trust, and recognition. We have incorporated these values into successful delivery for our customers since 1988. B&A believes in ensuring its employees feel deeply connected to B&A, recognizing successes and hard work, and providing continuous opportunities to learn and grow. Our people are entrepreneurial thinkers that combine mindset, vision, and experience to drive value – not only to us as an organization, but to the clients we support. We promote a collaborative culture with our clients, and with each other, as one team working towards a common vision. We’d love for you to join our team!

Job Summary

Intelligent Waves, a B&A company is looking for a Senior Red Team Operator to support a federal government client in support of an important mission. The Senior Red Team Operator will provide contractor services for a U.S. Courts contract. This is a hybrid position - 80% remote - reporting once weekly to an office next door to Union Station in Washington, D.C. 100% reimbursement of commuting expenses for parking, MARC, VRE or Metro is provided.

Responsibilities

• Lead mission-critical Red Team cybersecurity exercises that comprehensively test and fortify production IT infrastructure, physical facilities, and personnel within federal court systems, ensuring the highest standards of national security.
• Develop and conduct spear phishing campaigns to gain internal network access.
• Conduct exploitation of external-facing assets to gain internal network access.
• Conduct post-exploitation actions toward exercise objectives.
• Conduct on-site physical penetration assessments at various federal courthouses and other Court locations to obtain internal network access.
• Use custom code and/or commercial-off-the-shelf (COTS) exploitation frameworks to bypass and penetrate network and system defenses.
• Comply with unique rules of engagement (ROE) for each exercise, along with standard operating procedures (SOP) for Red Team operations.
• Employ Red Team tradecraft while conducting exercises.

Required Skills

• Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience.
• Minimum 2 years technical red team leadership experience (non-overlapping).
• Minimum 3 years of hands-on experience modifying and customizing red teaming software frameworks (Cobalt Strike, Kali, etc.).
• Minimum 2 years independently conducting every phase of a red team exercise without supervision.
• Minimum 2 years developing payloads that bypass A/V and EDR solutions.
• Minimum 2 years mentoring junior and mid-level operators on red team tradecraft and advanced knowledge.
• Minimum 2 years delivering technical red team reports and briefings.
• Must have Red Team web applications experience.
• CRTO certification required within 90 days of start date.
• Experience with Static Application Security Testing (SAST)/Dynamic Application Security Testing (DAST) and integrating results into developer workflows.
• Knowledge of OWASP Top 10 & SANS Top 25 vulnerabilities, with ability to exploit/remediate.
• Application security testing for web, mobile, and API endpoints.

Security Clearance

Public Trust - Applicants selected for this position will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Only U.S. citizens are eligible for a security clearance. For this position, we will consider only applicants with current security clearances and those eligible to obtain one.

Salary Range

$135,000 - $154,000

Physical & Work Environment Requirements

Employees must be able to perform the essential functions of this position, with or without accommodation. Ability to remain stationary for extended periods while working at a computer. Frequently operate standard office equipment, including computers and telephones. Ability to communicate effectively in person, by telephone, video conference, and email. Occasionally move about the office and lift up to 20 pounds. Ability to work the assigned schedule with regular and reliable attendance. Ability to travel up to 10% as required.

More About B&A:

B&A delivers secure, innovative, and mission-critical IT solutions to support the United States Government across all three branches—Executive, Legislative, and Judicial—focused on National Security, Defense, and Intelligence. Our team of cleared professionals specializes in Agile DevSecOps, Cloud Migration and Modernization, Data Science and Analytics, Human Capital Management, Operations and Enablement, Application Transformation, All-Source Intelligence, Geospatial Production, Engineering and Integrated Services, and Cybersecurity.

Notable Clients

B&A has grown to be a company that is trusted by our clients for exceptional service, innovative solutions, and inspired employees. Our service extends through federal, state, and local Government, the private sector, and higher education. Some of our notable clients include Department of Homeland Security, U.S. Customs and Border Protection, U.S. Senate, U.S. Courts, U.S. Census Bureau, U.S. Navy, and more.

Benefits and Programs

Intelligent Waves, a B&A Company, offers a generous benefits package including medical, dental, vision, paid PTO, life and disability insurance. We invest in our employees' futures by contributing with vesting starting from DAY 1, technical training, tuition bonuses, and much more.

B&A has launched several programs to focus on employee engagement, wellness, and assistance. These include:

• The B&A Cares program: 30/60/90-day wellness check ins, personal development, financial management, and stress management seminars, and more
• A formal mentorship program
• Job shadowing and cross training opportunities
• Brand Ambassador program
• Employee Assistance Program (EAP) - Access to various support resources to include counseling, legal guidance, financial planning, and more
• Monthly teambuilding events
• B&A Annual Wellness Challenges: #StepWithB&A, #WalkDuringLunchWithB&A, #VolunteeringWithB&A, #ExerciseDuringLunchWithB&A, and more

At B&A, we place significant importance on improving the communities and lives of citizens across the nation through our involvement, technology expertise, and employees. B&A puts an emphasis on charitable efforts in the Northern Virginia area, including Capital Area Food Bank pantry drives, book donations, Hope for Henry Foundation events, and many more. In recognition of all these efforts, B&A has been named a Companies as Responsive Employers (CARE) award recipient by Northern Virginia Family Services and nominated by the Northern Virginia Chamber of Commerce for Outstanding Corporate Citizenship Award.

EEO

B&A provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. B&A complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy covers conduct occurring at B&A’s offices, and other workplaces (including client sites) and all other locations where B&A is providing services, and to all work-related activities.

EEO is the Law

B&A participates in e-Verify. We provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee’s I-9 Form to confirm work authorization.