CareerPlanSign in

Security Engineer (Offensive) - Red Team Adversary Emulation Tech Lead

Quantico, Virginia, United States💼 Full-time💰 $150,000–$175,000🗓 2026-09-03 → 2026-09-26

Core

Lead Red Team Persistent Cyberspace Operations (PCO) by planning and conducting long-term adversary emulation of Advanced Persistent Threats (APTs) to assess and improve the security posture of enterprise and mission-critical environments.

Role type

Senior IC Red Team Adversary Emulation Tech Lead

Builds

Offensive cyber operations, proof-of-concept exploits, and detection/response improvements for government and commercial sectors

Domain

National Security / Cyber Defense / Offensive Security

Deliverable

production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work

Required skills

Red Team operations, penetration testing, vulnerability research, incident response, detection engineering, network/host/application exploitation, TTP development, technical writing, Active Directory, Windows/Linux systems, networking fundamentals

Preferred skills

AV/EDR evasion, custom tooling/C2 development, malware analysis/reverse engineering, C/C++ development, cloud platforms (AWS/Azure/GCP), ICS/IoT/FRCS, offensive-security certifications (OSCP/OSCE/CRTO)

Responsibilities

Plan and execute no-notice and cooperative Red Team operations across enterprise, application, and cloud environments; Identify and exploit network, host, and application-level vulnerabilities; Develop and refine proof-of-concept exploits and techniques to test defensive measures; Produce detailed technical findings and recommendations for remediation; Collaborate with defensive and engineering teams to improve detection and response; Continuously evolve team tactics, techniques, and procedures (TTPs), documentation, and training materials to reflect emerging adversary behaviors; Prepare, update, document, and present course materials that cover TTPs; Provide support required to maintain the customer's Cybersecurity Service Provider (CSSP) accreditation per the standards, including documentation and technical writing support as needed

Seniority

Senior, hands-on IC with leadership responsibilities

Sourced via workable · Listed on CareerPlan, which tracks 70,000+ jobs from 20+ sources.