CNO Delivery Operator

Key Responsibilities

• Target Identification & Traffic Analysis:
• Analyze broadband and Internet traffic to identify viable remote delivery opportunities.
• Identify OS characteristics, technical indicators, and network behaviors relevant to delivery planning.
• Assess risks related to host-based and network-based defensive tools that may obstruct delivery or expose operations.
• Maintain situational awareness of target behavior, access challenges, and environmental changes that may impact mission execution.
• Remote Delivery Preparation & Execution:
• Configure remote delivery systems and servers to support controlled exploitation of identified targets.
• Execute remote delivery operations to obtain system-level access using mission-approved capabilities.
• Validate successful access and confirm system compatibility prior to implant installation.
• Troubleshoot delivery issues and collaborate with engineering teams to refine configurations or delivery profiles.
• Operational Compliance & Documentation:
• Operate within legally governed technical collection programs, adhering strictly to authorization procedures.
• Document all operational actions, decisions, configuration changes, and outcomes in accordance with program standards.
• Ensure remote delivery activities comply with mission scope, timelines, and legal requirements.
• Stakeholder Interaction & Mission Support:
• Communicate technical constraints, access limitations, and environmental risks to investigative and mission stakeholders.
• Coordinate with case managers, CNE tool operators, and technical leads to ensure synchronized mission execution.
• Support deconfliction efforts across operational teams to maintain safe, compliant, and integrated mission activities.

Required Experience/Clearance

• Active Top Secret clearance with SCI eligibility.
• 5+ years of experience supporting CNO/CNE operations, offensive cyber operations, or penetration testing.
• Hands-on experience delivering remote exploits, conducting controlled injections, or leveraging remote delivery platforms.
• Strong understanding of broadband architectures, Internet traffic patterns, and common network delivery points.
• Experience analyzing network traffic to identify controlled access opportunities or exploitation paths.
• Knowledge of defensive mechanisms such as antivirus tools, intrusion detection systems, and OS-level protections.
• Demonstrated ability to operate within legally governed technical collection programs requiring strict compliance.
• Strong communication skills, including the ability to convey technical issues to investigative and non-technical personnel.

Desired Experience

• Experience with vulnerability exploitation, payload delivery, and access development. 
• Familiarity with OS internals and network stacks (Windows, Linux, mobile OS environments). 
• Understanding of broadband service provider technologies and delivery paths. 
• Experience in mission-critical operational environments with time-sensitive tasking. 
• Scripting or automation skills (Python, Bash, PowerShell) for traffic analysis or environment preparation.