Cyber Red Team Lead Operator

About the Role

Are you ready to push the boundaries of cybersecurity by simulating adversarial threat actors? The Red Team Operator role focuses on rigorous evaluation of systems and infrastructure, leveraging advanced technologies to uncover vulnerabilities and strengthen cybersecurity defenses. This position involves exploiting weaknesses in Facility-Related Control Systems (FRCS) and Industrial Control Systems (ICS) while testing network topology to identify and address critical gaps in security posture.

If you thrive in offensive security operations and have a passion for enhancing cybersecurity in dynamic environments, this is the opportunity for you!

Work You'll Do

As a Red Team Operator, your primary responsibilities will include:

• Performing vulnerability assessments and authorized exploitation of applications, network devices, and physical infrastructure.
• Designing and conducting adversarial engineering attacks to test and challenge cybersecurity measures.
• Simulating adversarial tactics, techniques, and procedures to test detection and response controls across enterprise systems.
• Developing and presenting technical and executive reports to stakeholders, including mitigation strategies.
• Researching and experimenting with emerging attack methodologies to improve penetration testing techniques.
• Assisting with malware reverse engineering, attack reconstruction, and development of offensive tools.
• Collaborating with Blue Team analysts to validate security improvements through rigorous testing.
• Developing and maintaining threat intelligence indicators and identifying gaps in security posture.
• Ensuring adherence to engagement scopes and delivering comprehensive vulnerability assessment reports.

Qualifications

Required:

• Active Secret Clearance.
• Bachelor’s degree in IT, Cybersecurity, or a related field.
• 5+ years of experience in security operations or industrial control system automation/management, with demonstrated leadership in customer-facing roles.
• Proficient in hacking/infiltration tools, adversarial attack simulations, and compliance with DoD policies.
• Strong knowledge of network protocols (e.g., TCP/IP, ICMP, HTTP/S, DNS, SSH, SMTP) and familiarity with tools such as Palo Alto, Elastic SIEM, Splunk, VMware, and Security Center.
• Expertise in Linux and Windows operating systems, scripting languages (Python, Bash, PowerShell), and penetration testing methodologies.
• Deep understanding of the MITRE ATT&CK framework, threat intelligence, and attack classifications.
• Must be legally authorized to work in the U.S. without employer sponsorship.

Preferred:

• Active Top Secret or TS/SCI Clearance.
• Experience developing custom exploits and tools for penetration testing and cyber threat emulation.
• Familiarity with Operational Technology (OT) or ICS.
• Advanced certifications such as:
  • Certified Ethical Hacker (CEH)
  • Offensive Security Certified Professional (OSCP)
  • GIAC Penetration Tester (GPEN)
  • Certified Information Systems Security Professional (CISSP)
  • GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)

Compensation

The wage range for this role is $102,750 to $171,250, considering factors such as skills, experience, certifications, and organizational needs. Deloitte does not typically hire individuals near the top of the range, and compensation decisions are based on individual circumstances.

You may also be eligible for participation in a discretionary annual incentive program, which is contingent on individual and organizational performance.

Additional Information

For applicants requiring accommodations, visit: Deloitte Assistance for Disabled Applicants.