Cyber Red Team Lead Operator

Location: - Port Hueneme, Ventura County, CA Work Arrangement: Onsite with travel based on mission requirements Security Clearance: Active Secret clearance required; must be eligible for a Top Secret clearance upgrade. Position Summary Clark Creative Solutions is seeking an experienced Cyber Red Team Lead Operator to support NAVFAC cybersecurity operations.

• This role will conduct and lead authorized penetration testing, cyber threat emulation, vulnerability exploitation, and adversarial security assessments designed to identify weaknesses and strengthen the cybersecurity posture of Facility-Related Control Systems (FRCS), Industrial Control Systems (ICS), networks, applications, and supporting infrastructure. The ideal candidate has hands-on experience with ethical hacking, Advanced Persistent Threat (APT) tactics, penetration testing, vulnerability exploitation, attack methodologies, and cyber threat emulation. Essential Duties & Responsibilities Conduct internal, external, and remote penetration testing.
• Perform authorized vulnerability testing and exploitation of applications, network devices, operating systems, protocols, and infrastructure.
• Design and execute simulated adversarial attacks to test cybersecurity defenses.
• Lead Red Team engagement planning, tasking, risk analysis, and quality assurance.
• Research emerging threats, vulnerabilities, attack vectors, and adversarial Tactics, Techniques, and Procedures (TTPs).
• Develop offensive security tools and penetration-testing methodologies.
• Review code for security vulnerabilities and assist with malware analysis and reverse engineering.
• Analyze security logs for anomalies and potential cybersecurity threats.
• Collaborate with SOC Analysts, Incident Responders, Blue Team personnel, cybersecurity analysts, and project managers.
• Validate security improvements through follow-up testing.
• Develop vulnerability, assessment, and remediation reports for technical and nontechnical stakeholders.
• Communicate findings and recommended mitigation strategies to technical teams and executive leadership.
• Minimum Qualifications 5+ years of experience in security operations or industrial control automation/management, including demonstrated leadership in customer-facing roles.
• Experience with penetration testing, ethical hacking, vulnerability exploitation, or cyber threat emulation.
• Strong understanding of cyberattack classifications, attack stages, and system/application vulnerabilities.
• Knowledge of DoD policies and procedures.
• Knowledge of networking and protocols including TCP/IP, ICMP, HTTP/S, DNS, SSH, SMTP, and SMB.
• Experience with security and infrastructure technologies such as Palo Alto, Elastic SIEM, Cribl, Splunk, VMware, and Security Center .
• Proficiency with Linux and Windows operating systems.
• Experience with programming or scripting languages and security-tool development.
• Familiarity with the MITRE ATT&CK framework .
• Strong technical writing, analytical, troubleshooting, and communication skills.
• Preferred Qualifications Experience developing custom exploits or exploitation tools.
• Knowledge of Operational Technology (OT) and Industrial Control Systems (ICS) .
• Experience with Python, Bash, or PowerShell .
• Experience with BACnet, Modbus, SCADA systems, and PCAP .
• Experience using threat intelligence and emerging attack vectors to support continuous security monitoring.

Preferred Certifications Relevant certifications may include: - Certified Ethical Hacker (CEH) OffSec Certified Professional (OSCP) GIAC Penetration Tester (GPEN) GIAC Red Team Professional (GRTP) Certified Information Systems Security Professional (CISSP) GIAC Certified Incident Handler (GCIH) GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) GIAC Enterprise Vulnerability Assessor (GEVA) GIAC Information Security Fundamentals (GISF) Other equivalent cybersecurity or IT certifications may be considered. Clearance & Work Requirements Active Secret clearance .

• Must be eligible for a Top Secret clearance and willing to undergo the upgrade process.
• Must be able to work onsite in PortHueneme, California .
• Must be willing to travel based on mission-support requirements.
• Powered by JazzHR