Cybersecurity Red Team Operator - Federal Reserve Bank of Richmond Richmond, VA, USA Bookmark Share Print 2123 0 4

Listing Description

• Collaborate in on-net operations during threat emulation assessments
• Provide offensive security domain expertise in purple team exercises
• Keep up to date with current and emerging exploits, TTPs, and offensive security tooling
• Continuously grow your tradecraft and improve team capabilities
• Brief executive stakeholders on enterprise risks identified through Red Team activities

Qualifications

• Bachelor’s Degree or higher in computer science or related field
• 5+ years of prior experience performing offensive security operations including red teaming, and penetration testing; or an equivalent combination of education and work experience 
• The following certifications are highly preferred: GPEN, GXPEN, OSCP 
• Recent experience in: 
  • All phases of red team operations including recon, social engineering, exploitation, lateral movement and exfiltration 
  • Performing security assessments in cloud environments 
  • Advanced social engineering including pretext development, payload weaponization and delivery techniques  
  • Understanding of defensive controls and how to bypass them 
  • Using and customizing commercial and open source security assessment tools including Cobalt Strike and Bloodhound 
  • Modifying and using payloads to avoid common detections
  • Handling and managing implants and footholds during Red Team operations
  • Deploying, configuring and managing infrastructure to support offensive operations
• Familiarity with:
  • Computer network, application, database, and web exploitation principles
  • Active Directory and enterprise network exploitation
  • OPSEC techniques including network traffic, post-exploitation activities and payloads to blend in to target environments
• Experience with scripting/programming using one or more of the following: Python, PowerShell or C# with the ability to create or customize tools as needed
• Experience with open security testing standards and projects, including OWASP & ATT&CK
• Ability to able to obtain and maintain a National Security Clearance. Ability to obtain a clearance requires US Citizenship.

• Great medical benefits
• Pension and 401(k) with employer match
• Paid time off
• Tuition reimbursement
• Employee resource networks
• Paid volunteer leave
• Flexible work options
• Onsite amenities that make working here fun

• Candidates should review the Bank’s Employee Code of Conduct to ensure compliance with conflict of interest rules and personal investment restrictions.  The Code is available on the About Us, Careers webpage at www.richmondfed.org.
• Sponsorship is not available for this role. Selected candidate is subject to special background check procedures including criminal check, credit check, and drug screen.
• By federal law, the candidate hired for this position must able to obtain and maintain a National Security Clearance. Ability to obtain a clearance requires US Citizenship.
• The Richmond, VA salary range for the  Cybersecurity Red Team Operator (Senior Cyber Security Analyst) is $93,000 - $116,200 annually.
• Salary offered will be based on the job responsibilities and the individual’s knowledge, skills, and experience as defined in the job qualifications/experience. For candidates located outside of Richmond, VA, the salary range may be adjusted for your geographic location.
• Applications or this role will be reviewed on a rolling basis. 

The Federal Reserve Bank of Richmond provides equal opportunity to all individuals without regard to race, sex, color, religion, gender identity or expression, sexual orientation, national origin, age, disability, or genetic information.