Red Team Operator SME & Advanced Tools Developer

Overview

Since 2006, Intelligent Waves delivers mission-focused multi-domain operational expertise and innovation to the Government through high-impact technology solutions in cybersecurity, data science, enterprise network engineering, software development, and platform mission support. Always ready. Anytime. Anywhere. Any domain.

Intelligent Waves, delivers innovative technology solutions to enable a more secure nation has a need for a Red Team Operator SME & Advanced Tools Developer, pending award, to support a critical DOJ customer. The Red Team Operator SME & Advanced Tools Developer will provide contractor services for a U.S. Courts contract.

Location: This Red Team Operator SME is based in National Capital Region (NCR).

Travel: Ability to travel up to 40% of the time and will be reimbursed based on IW policy, GSA Per Diem rates and DoD Joint Travel Regulations (JTR) as required.

Security Clearance: This Red Team Operator SME must be a United States Citizen and be able to obtain and hold a Public Trust.

Employees are required to follow all company and customer site COVID-19 protocols.

Responsibilities

• Conduct red team exercises against production IT systems, facilities, and personnel belonging to the AO and the Courts.
• Develop and conduct spear phishing campaigns to gain internal network access.
• Conduct exploitation of external facing assets to gain internal network access.
• Conduct post-exploitation actions towards exercise objectives.
• Conduct on-site physical penetration assessments at various federal courthouses and other Court locations in order to obtain access to the internal network.
• Use custom code and/or commercial-off-the-shelf (COTS) exploitation frameworks to bypass and penetrate network and system defenses.
• Comply with the unique rules of engagement (ROE) that will be provided for each exercise along with the standard operating procedures (SOP) for overall Red Team operations.
• Employ red team tradecraft while conducting exercises.

Qualifications

• Minimum of 4 years of experience developing exploits and implants for embedded systems, based on reverse engineering and vulnerability analysis.
• Minimum of 4 years of experience in thoroughly testing, documenting, and integrating with existing
  frameworks and systems to operationalize developed code.
• Minimum of 4 years of experience in offensive software development, including red teaming tools, custom
  malware, trojans, shellcode, etc., using low-level languages (C, C#, C++, assembly, etc.)
• Minimum of 4 years of experience using Windows kernel, APIs, system calls, and other operating systems
  internals and how to leverage them for offensive purposes.
• Minimum of 4 years of experience using Linux internals, including kernel module development, system
  calls, and other operating systems internals and how to leverage them for offensive purposes.
• Hands-on experience with using modifying and customizing penetration testing and red teaming software frameworks (Cobalt Strike, Kali, etc.) to meet operational requirements.
• Ability to independently conduct every phase of a red team exercise on their own without guidance or supervision.
• Hands-on experience developing payloads that bypass A/V and EDR solutions for use in various phases of a red team exercise.
• Ability to mentor junior and mid-level operators on red team tradecraft and Advanced Knowledge Requirements (that they possess).
• Experience in professionally delivering technical and executive-level red team reports and briefings.
• OSCE, OSEE, GXPN, CRTO certifications preferred but not required.
• Experience in software development, including red teaming tools, custom malware, trojans, shellcode, etc., using low-level languages (C, C++, assembly, etc.).
• Possess advanced knowledge of Windows kernel, APIs, system calls, and other operating systems internals and how to leverage them for offensive purposes.
• Experience in investigating adversarial actions leveraging these Windows operating system internals.
• Possess advanced knowledge of Linux internals, including kernel module development, system calls, and other operating systems internals and how to leverage them for offensive purposes.
• Experience in investigating adversarial actions leveraging these Linux operating system internals

Clearance Statement: Applicants selected for this position will be subject to a government security investigation and must meet eligibility requirements for access to classified information. Only US citizens are eligible for a security clearance. For this position, Intelligent Waves will consider only applicants with active Public Trust or higher-level security clearances.

Intelligent Waves LLC is an equal opportunity employer. We are committed to providing equal opportunity to all applicants and employees in full compliance with all applicable state and federal laws prohibiting discrimination on the basis of race, color, age, gender, religion, national origin, disability, sexual orientation and gender identity protected veteran status and individuals with disabilities, or any other class protected by applicable state or federal law.

As an Affirmative Action and Equal Opportunity Employer, IW is committed to the full inclusion of all qualified candidates and current employees. As part of this commitment, IW will ensure that those in need are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact humanresources@intelligentwaves.com.

A Veteran Friendly Organization

#IW

#CJ