Red Team Operator

Overview

For two decades, Millennium Corporation has been operating on the leading edge of cybersecurity. Our elite team of more than 400 experts has an unparalleled record of performance supporting Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering. With the largest contingent of contracted Red Team operators in the DoD, we provide an unmatched level of threat intelligence and battle-tested experience for customers in both the DoD and federal civilian markets.

What We Believe

Millennium is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state, or local law.

Responsibilities

Millennium Corporation is hiring a Red Team Operator to work in Norfolk, VA. The candidate must have an active TS/SCI clearance.

• Conduct open source research and system under test documentation review to familiarize with the system’s mission, architecture and interfaces including critical components to identify its attack surface and threat vectors
• Work with the customer Cyber Test Engineers and subject matter experts to generate specific test objectives for incorporation into the overall test plan
• Conduct cooperative vulnerability penetration assessments and adversarial assessments in accordance with DoD guidance and Cyber OT&E policies, guidance and procedures
• Participate in customer Cyber Survivability Test Planning Check Points, pre-coordination meetings and conduct pre-execution site surveys
• Attend site visits and conduct manual examination of system and network configurations, system logs, and devices
• Observe, collect, and analyze Cyber OT&E test data in accordance with the customer Cyber OT&E policies, guidance and procedures
• Provide and/or support pre and post-test execution meetings and briefs
• Use customer provided and Navy Authorizing Official approved commercial and open source network cyber assessment tools (e.g. Core Impact, Nmap, Burp, Metasploit, and Nessus).
• Employee ethical hacking expertise to exploit discovered vulnerabilities and misconfigurations associated with but not limited to operating systems (Windows, Linux, etc.), protocols (HTTP, FTP, etc.), and network security services (PKI, HTTPS, etc) to accomplish test objectives
• Research various cyber actors’ TTPs, organizational structures, capabilities, personas, and environments, and integrate findings into Cyber Survivability test planning and execution
• Develop and utilize program specific testing methodology for threat emulation and vulnerability validation
• Participate in program specific technical exchanges, cyber table tops, risk reduction events, and planning events
• Conduct and coordinate JHQ DoDIN directed deconfliction process

Qualifications

• Candidate must have an active TS/SCI
• 6 years of experience within cybersecurity and Bachelor's degree required.
• Develop Operational Risk Management (ORM) concepts and matrixes to support safe and effective operations
• Develop and utilize red team testing methodology for threat emulation and vulnerability validation
• Research and recommend new capabilities for test infrastructure and toolset to advance Cyber OT&E mission
• Generate and update NSA Red Team certification documentation
• Participate/support certification events

Business Development

Assist with Business Development activities as required to support Millennium's strategic business objectives, which may include but not limited to participation in technical interviews, creation of technical documentation, general proposal writing support and proposal color reviews.

Physical Requirements

• Must be comfortable with prolonged periods of sitting at a desk and working on a computer.
• Must be able to lift up to 10-15 pounds at a time.