B

Booz Allen

Builds AI and cyber systems for the US government

Senior Red Team Operator

Offensive Security & TestingConfirmed live in the last 24 hours
Full-timeChantilly, VA, USA$86.8k - $198k /yrIn-person

About the Job

Requirements

  • Experience using, administering, and troubleshooting Windows and Linux systems.
  • Experience scripting, editing existing code, and programming in one or more of Python, Bash, C/C++, C#, Rust, Go, PowerShell, or Java.
  • Experience developing, extending, or modifying exploits, shellcode, or exploit tools to evade common endpoint detection and response systems.
  • Experience with security assessment tools, including Nessus, Metasploit, Burp Suite Pro, Cobalt Strike, or Mythic.
  • Experience with Amazon cloud environments and major technologies such as IAM, EC2, VPC, EBS, S3, and Lambda.
  • Experience performing common Windows and Active Directory attacks, including ADCS abuse, Kerberoasting, password spraying, and ACL abuse.
  • Experience with common Azure or Microsoft 365 attacks.
  • Experience designing and operating red-team infrastructure, including command-and-control infrastructure, redirectors, domains, certificates, payload delivery infrastructure, and operational security controls.
  • Ability to use a Linux-based operating system as a daily base operating system.
  • High school diploma or GED.
  • U.S. citizenship is required due to the nature of work performed at the facility.

Responsibilities

  • Validate security controls and incident response through offensive security operations, including red teaming and purple teaming.
  • Interface directly with client leadership and technical security staff to lead red-team and purple-team engagements across scenarios ranging from phishing-based initial access to operational technology or industrial control systems network perimeter and egress testing.
  • Work with a team of security testing professionals to enhance existing service offerings and security testing capabilities.
  • Conduct hands-on technical testing focused on detection and response, using continuously customized tooling to avoid antivirus, endpoint detection and response, and other protection technologies.
  • Conduct full exploitation and leverage access within multiple environments, including complex Active Directory and mixed Windows and Unix environments.
  • Develop comprehensive and accurate reports and presentations for technical and executive audiences.
  • Communicate findings and strategy to client stakeholders, including technical staff, executive leadership, and legal counsel.
  • Apply security testing and penetration testing techniques and mindset to a wide range of projects.
  • Act as the primary interface and lead for small red teams of one to three additional testers and manage delivery of staff assignments as needed.
  • Contribute to research and knowledge-sharing within the security team.

Desired Qualifications

  • Five or more years of experience in offensive security testing, such as web application security testing, network penetration testing, red teaming, or purple teaming.
  • Experience safely and effectively leveraging AI tools such as Claude Code or Codex to support security testing engagements.
  • Experience with assembly languages, including x86, or reverse engineering.
  • Experience with hardware reverse engineering using JTAG or UART.
  • Experience with Terraform or similar automation technologies.
  • Experience with physical security assessments, including use of Proxmark3 or similar proximity card spoofing or copying devices.
  • Knowledge of network vulnerability assessments, web application security testing, network penetration testing, red teaming, security operations, or threat hunting.
  • Knowledge of open security testing standards and projects, including OWASP and ATT&CK.
  • Bachelor's degree in Computer Engineering, Computer Science, or Cybersecurity.
  • Ability to obtain an Offensive Security certification within one year of hire, including OSWP, OSCP, OSCE, OSWE, SANS, GAWN, GPEN, or GXPN certification.

About the Company

Booz Allen

Builds AI and cyber systems for the US government

Booz Allen builds and runs technology for the U.S. government, mostly for the military and intelligence agencies, and its engineers work alongside consultants who know each agency's mission. In 1958, it helped the U.S. Navy create PERT, a project-scheduling method first used on the Polaris submarine missile program and later adopted across government and industry. Its teams design cyber defenses, AI and data tools, and battlefield communications, and it sells its own products, such as Vellox, a suite of AI tools that spot and fight off hackers. Agencies pay mainly through multi-year contracts that reimburse costs, bill hours, or set a fixed price. Booz Allen was founded in 1914 and is based in McLean, Virginia.

Company size
10,001+
Company stage
IPO
Headquarters
McLean, VA
Founded
1914

Recently Posted Jobs

Explore more opportunities at Booz Allen

See more jobs