Red Team Operator at Maveris

Washington, District of Columbia, United States -

Full Time

Start Date

Immediate

Expiry Date

23 Jan, 26

Salary

0.0

Posted On

25 Oct, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cyber Security, Red Teaming, Penetration Testing, Vulnerability Research, Technical Reporting, Cloud Technologies, Exploit Development, Scripting, Social Engineering, Active Directory, Command And Control, Offensive Security Certifications, Wireless Technologies, Adversarial Threats, Root Cause Analysis, Trade-Craft Improvement

Industry

IT Services and IT Consulting

Description

Maveris is an IT and Cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission. Originally founded as a Veteran-owned company, we remain deeply committed to supporting veterans and proudly serving customers across the Federal Government and private sector. We have an opening for a full-time, Red Team Operator to join our talented, dynamic team. The Red Team Operator will operate as part of our Red Team staff, a key contributor on our small teams conducting advanced adversary emulation operations against real-world targets, in varying environments, and against active network defenders. The Red Team Operator will participate in the design, development, and execution of Red Team Operations. The Red Team Operator will provide support to the Red Team Leads as required to ensure post operations technical reports and support activities are completed with the required timeline. Veterans are encouraged to apply. Duties Be a key contributor to Red Team operations and provided expertise to aid in development and execution of Red Team Operations. Requires broad technical knowledge and a subject matter expert in relation to adversarial threats and offensive TTP's. Chain vulnerabilities together and move laterally through an environment without detection. Ability to perform root cause analysis of vulnerabilities and effectively communicate findings to customers in both written and verbal formats. Improve team trade-craft, techniques, tactics, procedures, infrastructure, and tooling. Conduct independent vulnerability research to discover new vulnerabilities or TTP's. Develop scenarios and artifacts that mimic real-world adversary groups for simulated testing. Provide remediation recommendations based on discovered weaknesses and vulnerabilities. Develop technical reports and work with customers to aid in remediation/validation of discovered findings. Support the offensive capabilities team to enhance capabilities, innovate new capabilities, and/or develop training material. Work in a collaborative environment with others. Bachelor’s Degree or higher in Computer Science, Information Technology, Cybersecurity, or a related field – equivalent experience may be considered in lieu of a degree. 5+ years of Cyber Security experience. 3 years of offensive focused experience (Red Teaming, Purple Teaming, Penetration Testing, tool development, etc.). Hands-on keyboard experience during multiple Red Team engagements. Understand Red Teaming Methodology (Recon, Exploitation, Persistence, Lateral Movement, Post Exploitation, and Exfiltration). Be able to explain the tools and techniques used during each phase of a red team operation, their purposes, and any OPSEC-related considerations. Experience with common Penetration Testing and Red Team Tools such as Burp Suite, C2 Frameworks, Kali Linux, and Open-Source Hacking Tools. Demonstrated ability to script effectively in both Linux and Windows environments, with development experience in a language of choice (e.g., Python, Rust, Go, .NET, etc.). Experience with or an understanding of multiple concepts below: Command and Control channel frameworks and Offensive infrastructure deployment. Cloud Technologies (Azure, AWS, Heroku). Reverse Engineering malware, data obfuscation, or encryption. Web Application Technologies. Social Engineering and related Psychology disciplines and experience. Active Directory and authentication-type technologies (Okta, SAML, ADFS Federation, etc.). OPSEC-focused Infrastructure Implementation (Docker, Redirectors, Mail Servers). Exploit Development in Windows and Linux environments. Rapid Development of offensive-focused tooling and trade-craft. Wireless and Radio Frequency technologies (Bluetooth, 802.11, etc.). Hold Offensive Security related certifications. Maveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including: 401(k) with company match Dental Insurance Health Insurance Vision Insurance Life Insurance Paid Time Off About Maveris Maveris offers exceptional, mission-focused, solutions to organizations facing highly complex IT, digital, and cybersecurity challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Maveris brings something unique to the table, and because our team is diverse, we consistently meet our goals and exceed client expectations. If you are a highly-motivated person with a willingness to learn, we invite you to apply today to join our team! To learn more about employee benefits visit www.maveris.com. For company updates and the latest job postings check us out on LinkedIn. If you'd like to read about some of our research and projects head over to Maveris Labs. Want a more behind the scenes view? Check out our blog Maveris Insights to learn more about the team behind the solutions.

Responsibilities

The Red Team Operator will conduct advanced adversary emulation operations against real-world targets and support the Red Team Leads in ensuring timely completion of post-operation reports. They will also improve team techniques and conduct independent vulnerability research.