Senior Red Team Operator

• Position: Senior Red Team Operator
• Job Type: Full Time
• Location: Hybrid (onsite 1/x week) -Washington D.C.
• Clearance Requirements: None
• Travel: Up to 10%

SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. You’ll work with our highly skilled operators conducting research and assessments based on real-world threats. You’ll simulate adversaries and malicious actors and report details and actionable findings on critical assets and infrastructures. Using innovative processes, tools, and techniques, you’ll predict and overcome cybersecurity vulnerabilities. Your successes will be supported by our diverse team of experienced, technical talent.

• Simulate real-world cyberattacks to assess and challenge the effectiveness of security controls and incident response capabilities.
• Conduct reconnaissance, exploitation, and post-exploitation activities using adversary tactics, techniques, and procedures (TTPs).
• Develop and use custom tools and methods to evade detection and maintain stealth during engagements.
• Collaborate with blue and purple teams to improve detection, response, and overall security posture.
• Document findings and deliver clear, actionable reports to technical and executive stakeholders.

• US Citizen with the ability to obtain a Public Trust clearance.
• CRTO certification.
• CRTL, OSEP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required.
• Extensive Red Team Experience: Minimum 6 years of hands-on technical red team or government offensive cyber operations experience, plus 2 years leading such operations (non-overlapping).
• Full-Scope Operational Capability: At least 2 years of independently executing complete red team engagements, from planning through post-exploitation, without supervision.
• Advanced Tool Proficiency & Evasion Techniques: 3+ years modifying/red-teaming tools (e.g., Cobalt Strike, Kali) and 2+ years developing payloads to bypass A/V and EDR defenses.
• Experience performing engagements on cloud, hybrid, multi- and/or single-tenant active directory environments.
• In-depth knowledge and experience with Windows and *NIX-based operating systems, networking concepts, and Active Directory.