Red Team Infrastructure - SME

Position Overview

What You Will Do

Minimum of 4 years of hands-on network administration and systems administration experience required:

• Developing, automating, and deploying red team exercise infrastructure – including Ubiquiti, Promox, Kubernetes and Ansible, Apache/NGINIX, and GOCD for CI/CD.
• Deploying, configuring, and maintaining routers, switches, and firewalls.
• Securing red team exercise infrastructure from unauthorized access.
• Securing red team exercise infrastructure against various DCO identification and fingerprinting TTPs.
• Creating, configuring, and administering Active Directory lab environments.
• Creating, modifying, and deleting user accounts, groups, computer accounts, organizational units (OUs), and other objects in the directory service database.
• Installing new Windows and Linux operating systems on lab systems as needed, including installing device drivers and other software required for the systems to operate properly.
• Managing security across the lab environment by deploying new security patches and policies and monitoring activity for signs of intrusion or compromise.
• Maintaining infrastructure for VPN access.

Required Qualifications

• Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience (which is to say direct red team operations work and not just that which is in support of red team operations).
• Minimum 2 years technical red team and/or government computer network exploitation/attack operations leadership experience (note this is distinct experience from the above and cannot overlap).
• Minimum of 3 years of hands-on experience with using modifying and customizing penetration testing and red teaming software frameworks (Cobalt Strike, Kali, etc.) to meet operational requirements.
• Minimum of 2 years of independently conducting every phase of a red team exercise on their own without guidance or supervision.
• Minimum of 2 year of hands-on experience developing payloads that bypass A/V and EDR solutions for use in various phases of a red team exercise.
• Minimum of 2 years mentoring junior and mid-level operators on red team tradecraft and Advanced Knowledge Requirements (that they possess).
• Minimum of 2 years of experience in professionally delivering technical red team reports and briefings.
• Must possess or obtain the CRTO certification within 90 days of start date. 
• OSCP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required.

Benefits

Intelligent Waves offers a generous benefits package including medical, dental, vision, paid PTO, life and disability insurance. We invest in our employees’ futures by contributing with vesting starting from DAY 1, technical training, tuition bonuses, and much more.

Clearance Statement

Applicants selected for this position will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Only U.S. citizens are eligible for a security clearance. For this position, Intelligent Waves will consider only applicants with current security clearances or those eligible to obtain one.

Equal Employment Opportunity

Minimum of 4 years of hands-on network administration and systems administration experience required:

• Developing, automating, and deploying red team exercise infrastructure – including Ubiquiti, Promox, Kubernetes and Ansible, Apache/NGINIX, and GOCD for CI/CD.
• Deploying, configuring, and maintaining routers, switches, and firewalls.
• Securing red team exercise infrastructure from unauthorized access.
• Securing red team exercise infrastructure against various DCO identification and fingerprinting TTPs.
• Creating, configuring, and administering Active Directory lab environments.
• Creating, modifying, and deleting user accounts, groups, computer accounts, organizational units (OUs), and other objects in the directory service database.
• Installing new Windows and Linux operating systems on lab systems as needed, including installing device drivers and other software required for the systems to operate properly.
• Managing security across the lab environment by deploying new security patches and policies and monitoring activity for signs of intrusion or compromise.
• Maintaining infrastructure for VPN access.

• Minimum 6 years direct, hands-on technical red team and/or government computer network exploitation/attack operations experience (which is to say direct red team operations work and not just that which is in support of red team operations).
• Minimum 2 years technical red team and/or government computer network exploitation/attack operations leadership experience (note this is distinct experience from the above and cannot overlap).
• Minimum of 3 years of hands-on experience with using modifying and customizing penetration testing and red teaming software frameworks (Cobalt Strike, Kali, etc.) to meet operational requirements.
• Minimum of 2 years of independently conducting every phase of a red team exercise on their own without guidance or supervision.
• Minimum of 2 year of hands-on experience developing payloads that bypass A/V and EDR solutions for use in various phases of a red team exercise.
• Minimum of 2 years mentoring junior and mid-level operators on red team tradecraft and Advanced Knowledge Requirements (that they possess).
• Minimum of 2 years of experience in professionally delivering technical red team reports and briefings.
• Must possess or obtain the CRTO certification within 90 days of start date. 
• OSCP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required.