Red & Purple Team Operator

🕒 Yesterday

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SIXGEN

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🎖️ Defense

🔒 Cybersecurity

💰 $500k Seed Round on 2017-09

Consulting • Defense • Cybersecurity

SIXGEN is a cybersecurity company that provides both defensive and offensive cyber capabilities. It focuses on developing and applying automation and machine learning across the cybersecurity operations lifecycle to increase efficiency while preserving tradecraft. SIXGEN offers a comprehensive solution for cyber operations, integrating capabilities in areas such as space, RF, and drone operations with its powerful cyber products and expert services. The company provides unified cyber solutions, including remote access vulnerability exploitation and other cyber operations on a self-contained platform that is listed on the DoDIN's Approved Product List (APL).

📋 Description

• Independently plan and execute end-to-end Red Team engagements simulating sophisticated real-world adversaries and APTs • Develop realistic attack scenarios based on organizational risk, threat intelligence, and adversary TTPs • Conduct reconnaissance, initial access, exploitation, privilege escalation, credential access, persistence, defense evasion, lateral movement, command and control, and other authorized adversary activities • Evaluate prevention, detection, investigation, response, and recovery capabilities against advanced cyberattacks • Identify weaknesses across people, processes, technologies, security controls, and operational procedures • Plan and conduct collaborative Purple Team exercises with SOC, Threat Hunting, Incident Response, Detection Engineering, and other security personnel • Validate alerts, telemetry, detection logic, investigative procedures, and newly implemented detections or mitigations • Identify visibility, telemetry, detection, and response gaps and provide actionable recommendations • Conduct penetration testing across enterprise networks, systems, applications, cloud environments, and security infrastructure • Perform manual testing and validation, evaluate exploitability and organizational impact, and develop remediation recommendations • Design, deploy, secure, maintain, troubleshoot, and sanitize offensive security infrastructure, including AWS-based infrastructure, redirectors, C2, payload delivery, and testing systems • Translate threat intelligence into adversary emulation plans using MITRE ATT&CK • Collect and preserve evidence, document attack paths, and map activities to MITRE ATT&CK techniques • Produce comprehensive technical reports, executive summaries, and technical and executive out-briefings • Communicate findings to technical personnel and executive stakeholders and translate offensive findings into improved detection, response, and mitigation capabilities

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent professional experience • 7+ years of offensive cybersecurity experience involving penetration testing, Red Team operations, adversary emulation, or comparable security assessment activities • Ability to independently plan and execute Red Team and penetration testing engagements from initial scoping through final reporting • Hands-on experience with advanced network, Active Directory, identity, endpoint, application, and cloud attacks • Strong understanding of the MITRE ATT&CK framework and adversary TTPs • Experience developing and operating offensive security infrastructure in AWS, Azure, or comparable cloud environments • Experience with command-and-control frameworks and offensive security tooling • Strong understanding of Windows, Linux, Active Directory, networking, authentication protocols, and enterprise security architecture • Experience with manual exploitation, privilege escalation, lateral movement, credential attacks, persistence, and defense evasion • Experience collecting and documenting technical evidence during offensive security engagements • Strong technical writing skills and experience producing professional penetration testing or Red Team reports • Ability to work independently with minimal technical oversight while adhering to authorized scope and Rules of Engagement • Ability to be Cleared

🏖️ Benefits

• Employer-paid health insurance premiums (medical, dental, vision) for you and your family • Employer-paid short/long term disability insurance and basic life/AD&D insurance • 401K with a 4% employer contribution • Professional development reimbursement options available (training, certification, education, etc.) • Flexible and remote work policies for most positions • Flexible PTO and holiday schedule