JOB TITLE: Senior Red Team Cybersecurity Specialist
The Senior Red Team Cybersecurity Specialist joins the Adversary Emulation team within the National Incident Response Team to evaluate the cybersecurity posture of people, processes, and technology. This role involves performing security assessments against services, infrastructure, and applications to identify weaknesses before attackers can exploit them. Key responsibilities include leading covert offensive security activities across the cyber kill chain, developing attack scenarios for AI-related threats, and building automated workflow tools. The specialist must demonstrate expertise in adversary emulation, including threat modeling, reconnaissance, social engineering, malware development, and lateral movement. Required technical skills include proficiency in Python, PowerShell, Go, or C# for scripting. The work focuses on protecting information systems against unauthorized use by simulating real-world attacker tactics, techniques, and procedures in cloud and on-prem environments.
Covertly exploit vulnerabilities, misconfigurations, and weaknesses in systems to improve the organization's security posture.
Lead offensive security assessment activities across all stages of the cyber kill chain.
Integrate AI-powered tools into red team workflows and develop scenarios to assess resilience against AI threats.
Perform assessments on services, infrastructure, and applications to identify weaknesses before attackers do.
Develop and build workflow processes, automation, and tooling to improve operational efficiency.
Propose and implement cross-team initiatives to address recognized cybersecurity gaps.
Develop junior talent and share knowledge across the organization to foster a learning culture.
What we're looking for
Must have 6+ years of relevant information security work experience in areas such as computer network exploitation and post-exploitation.
Must be a subject matter expert in all phases of adversary emulation including attack planning, threat-modeling, reconnaissance, and social engineering.
Must be a subject matter expert in covert on-the-wire red team testing, malware/payload development, and advanced active directory attacks.
Must have offensive security experience in cloud and on-prem environments with advanced C2 infrastructure knowledge.
Must be a team leader with a collaborative approach and the ability to tailor communication to both technical and executive audiences.
Must have experience managing client relationships, including determining needs and managing expectations.
Must be accomplished with scripting/programming in Python, PowerShell, Go, or C# to create and customize tools.
Must be a US Citizen and able to obtain and maintain a National Security Clearance (Secret or Top Secret).
Red Team
Adversary Emulation
Offensive Security
Python
C#
Rust
Go
C
Windows
Linux
Mac
Incident Response
Threat Hunting
Cyber Threat Intelligence
Purple Team
Proof-of-Concept
Remote (Brooklyn Park, MN)13 days ago
$98,000–$176,000
Red Team
Adversary Emulation
Python
C#
Rust
Go
C
Windows
Linux
Mac
Purple Team
Incident Response
Threat Hunting
Cyber Threat Intelligence
Proof-of-Concept
Red Teaming
Penetration Testing
Cobalt Strike
Sliver
Python
C#
C++
Go
Docker
Active Directory
EDR) evasion
Reverse Engineering
x86
Linux
Windows
Cloud Technologies
MFA