• Operate as a senior member of a Red Team conducting advanced adversary emulation operations against real-world targets
• Lead a small team through the design, development, and decision making in the execution of red team operations
• Ensure that operations complete objectives within the designated timeline and status is communicated to leadership on a regular basis
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences
• Ensure post operations technical report and support activities are completed within the required timeline
• Develop scenarios and artifacts that mimic real-world adversary groups for simulated testing
• Improve team tradecraft, techniques, tactics, procedures, infrastructure, and tooling
• Provide support and mentorship to other Red Team operators

Basic Qualifications:

• 10+ years of experience with cybersecurity
• 5+ years of experience with Red Teaming, Purple Teaming, Penetration Testing, or tool development
• Experience with hands-on keyboard during multiple Red Team engagements
• Experience planning and leading Red Team engagements and ability to explain the tools and techniques to be used during each phase and their purpose with OPSEC-related considerations
• Knowledge of Red Teaming Methodology such as Recon, Exploitation, Persistence, Lateral Movement, Post Exploitation, and Exfiltration
• Experience with common Penetration testing and Red Team Tools such as Burp Suite, CobaltStrike (C2 Frameworks), Kali Linux, and Open-Source Hacking Tools
• Experience with Command and Control channel frameworks, offensive infrastructure deployment, Cloud technologies, reverse engineering malware, data obfuscation or encryption, Active Directory, and authentication-type technologies
• Experience with OPSEC-focused infrastructure implementation, such as Docker, Redirectors, or Mail Servers, and exploit development in Windows and Linux environments
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
• Bachelor's degree in CS, IT, or Engineering

Additional Qualifications:

• Experience with wireless and Radio Frequency technologies such as Bluetooth or 802.11
• Experience with Rapid Development of offensive-focused tooling and tradecraft
• Experience with phishing and other social engineering tactics
• Experience with assembly languages, including x86 or reverse engineering
• CISSP, CEH, OSCP, CRTO, GPEN, GXPN, OSCE, OSWE, GCIH, or GWAPT certification

Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client.

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.