Journeyman Red Cyber Operator – Federal Services

Why Black and Veatch

Recognized by Glassdoor as a 2023 Top 100 place to work, Black & Veatch allows you to lend your talent and perspective to humanity’s biggest challenges in a flexible environment where you are empowered to grow and explore new possibilities. We offer competitive compensation; 401K match and benefits that start day 1. Our hybrid environment allows you to balance your work and personal life.

At Black & Veatch, you own your career with purpose and meaning. You are empowered to grow and explore new possibilities at every step of your career journey. Bring your big ideas knowing you are safe to be who you are and speak up with concerns or questions and put your diverse talents and perspectives to use.

Business Overview

The Black & Veatch Federal Business is grounded in history and engineering the future. We have 100+ years of experience supporting the Federal government and are dedicated to employing talented and passionate professionals. Our vision is to be the greatest infrastructure solutions provider delivering top tier and high-quality design, engineering, and consulting services to the Federal government. Our primary areas of focus include Architecture/Engineering (A/E) and Classified Design Services, Construction Designer of Record (DOR) Services, and Integrated Services related to threat reduction, international development, cybersecurity and asset protection.

The Opportunity

BV Federal seeks an enthusiastic, articulate, motivated professionals to support the Defense Threat Reduction Agency’s (DTRA) Nuclear Enterprise Support Directorate (NE), Mission Assurance (MA) Department in executing Red Team Assessments. Red Teams perform assessments from an adversarial viewpoint and uses the full spectrum of identified adversarial capabilities, limited only by restrictions mandated by the customer and legal, safety, and security constraints, to test and evaluate protection strategies and demonstrate exploitation of identified vulnerabilities.

The Journeyman Red Cyber Operator emulates a potential adversary’s cyber reconnaissance, exploitation techniques, and attack capabilities against a targeted mission, system, network, component, or capability for red cyber assessments.

Assigned to projects for U.S. Government Agency/Department clients. Candidate must be a U.S. Citizen.

Key Responsibilities

• Executes computer network operations against official U.S. government organizations worldwide for the purpose of strengthening information system security, identifying potential intrusions and vulnerabilities, and recommending mitigation strategies.
• Expertly utilizes offensive computer network expertise to emulate a potential adversary’s cyber reconnaissance and exploitation techniques and attack capabilities against a targeted mission, system, network, component, or capability on behalf of senior DoD stakeholders.
• Demonstrate and apply expert knowledge of offensive cyber concepts and methods such as passive and active reconnaissance, infiltration, internal network pivoting and exploration, and data exfiltration in order to emulate adversarial actions and attacks and expose vulnerabilities when conducting red cyber assessments.
• Maintain operational, technical, and authoritative situational awareness during threat emulation-based exploitation and operations.
• Contractors will either perform remote operations from DTRA HQ at Ft. Belvoir, VA, and/or travel to and perform operations on-site at various CONUS/OCONUS sites.
• Produce and present formal and informal reports, briefings, and perspectives on adversarial behavior and attacks against target systems, technologies, operations, and missions provided to customers such as the Office of the Secretary of Defenses, Combatant Commands, General Officers, Field Officers, and Senior Executive Service levels.
• Write high-level technical reports and develop briefings documenting findings, concerns, trends, and implications for senior DoD officials and customers enabling personnel to consider the most significant technical and high-level factors when committing DoD resources to mitigate identified vulnerabilities and threats to critical national assets, networks, and systems.
• Build and develop assessment specific tools to better emulate adversarial threats and attacks, and demonstrate and exploit vulnerabilities to sensitive mission critical networks and systems.
• Analyze operational TTPs and creates tools and scripts to automate and expand capabilities and advance red cyber operational processes.
• Mentors Red Cyber Operators in doing the same.

Preferred Qualifications

• Typically 3+ years of related experience
• Hold an IAT Level III certification as defined and described in DoDD 8570.01, 8570.01-M, 8140.01-03 and as amended
• Journeyman Red Cyber Operators must be capable of meeting both Apprentice Operator requirements and Journeyman Operator requirements in the advance red cyber Operator Training Program. They must also be capable of performing the advance red cyber assessment-specific role of assessment Technical Lead. This is an assessment-specific leadership position responsible for guiding the technical planning, execution, and reporting of a specific assigned assessment.

Preferred Professional Certifications:

• Red Team Apprentice Course (RTAC)
• Red Team Journeyman Course RTJC)
• Certified Red Team Operator (CRTO) certification
• Offensive Solar winds Certified Professional (OSCP)
• Global Information Assurance Certification (GIAC) Exploit Researcher & Advanced Penetration Tester (GXPN)
• GIAC Penetration Tester (GPEN)
• GIAC Web Application Penetration Tester (GWAP).

Minimum Qualifications

• Bachelor’s degree or relevant work experience
• Has successfully managed multiple engagements simultaneously
• Contributor or leader to acquire new engagements
• 12-15+ years in a business/consulting environment. All applicants must be able to complete pre-employment onboarding requirements (if selected) which may include any/all of the following: criminal/civil background check, drug screen, and motor vehicle records search, in compliance with any applicable laws and regulations.

Certifications

• Secret Security Clearance required
• TS/SCI Security Clearance preferred

Work Environment/Physical Demands

• Hybrid work schedule – 3 days in office, 2 days remote
• Typical office environment, extensive domestic and international travel, extreme weather conditions. Sitting, walking, talking, hearing, reading, writing, keyboarding, driving, filing, reaching, stooping, crouching, bending, standing for extended periods of time, lifting or carrying up to 40 pounds.

Salary Plan

Job Grade