SIXGEN
Join to apply for the
Senior Cyber Operator
role at
SIXGEN .
Get AI‑powered advice on this job and more exclusive features.
Position:
Senior Cyber Operator
Job Type:
Full Time
Location:
Remote US. Proximity to Maryland or Virginia is a plus, but not required
Clearance Requirements:
No clearance required, but must be eligible for PT and secret clearances
Travel:
Up to 50%
About the Team SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. You'll work with our highly skilled operators conducting research and assessments based on real‑world threats. You'll simulate adversaries and malicious actors and report details and actionable findings on critical assets and infrastructures. Using innovative processes, tools, and techniques, you'll predict and overcome cybersecurity vulnerabilities. Your successes will be supported by our diverse team of experienced, technical talent.
What You'll Do
Provide recommendations for technical oversight of activities aligned to command priorities.
Perform internal and external pentest against systems to determine vulnerabilities and offer mitigation strategies.
Perform phishing assessments.
Perform vulnerability risk assessment.
Participate in the testing phase of security controls assessments using specialized knowledge of network protocols, operating systems, architectures, equipment, services, and standards.
Conduct comprehensive, black‑box penetration testing of web applications to identify critical vulnerabilities such as SQL injection, XSS, CSRF, XXE, deserialization attacks, RCE, etc. Utilize a bug bounty–style approach to independently enumerate and assess targets, simulating real‑world attack scenarios.
Analyze application architecture and source code (when available) to uncover deeper, logic‑based or systemic vulnerabilities.
Document and communicate findings with clear risk assessments, reproduction steps, and actionable remediation recommendations.
Stay up to date with evolving web technologies, threat trends, and security tools to ensure cutting‑edge testing practices.
Required Qualifications
2 years leadership experience directly leading a team.
Minimum 2 years of independently conducting every phase of a red team exercise on their own without guidance or supervision.
Minimum 2 years mentoring junior and mid‑level operators on red team tradecraft and Advanced Knowledge Requirements (that they possess).
Minimum 2 years of hands‑on experience in network mapping, vulnerability scanning, and penetration and web application testing using software frameworks (including but not limited to: Cobalt Strike, Kali, BurpSuite, etc.) to meet operational requirements.
Strong communication skills for interfacing with clients and documenting findings.
Demonstrated experience working both collaboratively and independently with minimal supervision.
Script writing and crafting of payloads that bypass A/V and EDR solutions for use in various phases of a red team exercise.
In‑depth experience pen testing on internal and external networks.
Minimum 5 years of hands‑on web application penetration testing experience, with a strong preference for OSCP or equivalent hands‑on certifications such as CBBH, CWEE, OSWA, OSWE, GWAPT.
Experience developing actionable intelligence based on open source intelligence (OSINT) gathering.
Experience building offensive capabilities or tools to enhance operations with programming languages such as, but not limited to, Python, Bash, Terraform, Ansible, etc.
Experience testing web‑based APIs (e.g., REST, SOAP, XML, JSON).
Advanced knowledge of manual testing techniques and automated tools (e.g., Burp Suite, OWASP ZAP) to assess application security.
Familiarity with FISMA and NIST 800‑series frameworks; experienced in applying formal testing protocols and methodologies to assess networks, web apps, and cloud environments.
CRTO certification required (or ability to obtain within 90 days of start date).
OSCP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required.
Willing and able to travel as needed. Up to 50% during periods of high workload.
US Salary Range $120,000 – $150,000 USD
Benefits
Employer‑paid health insurance premiums (medical, dental, vision) for you and your family.
Employer‑paid short/long term disability insurance and basic life/AD&D insurance.
401K with a 4% employer contribution.
Professional development reimbursement options available (training, certification, education, etc.).
Flexible and remote work policies for most positions.
Flexible PTO and holiday schedule.
SIXGEN is an Equal Opportunity Employer. We ensure that all applicants are considered for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, age, marital status, ancestry, projected veteran status, or any other protected group or class.
We are committed to fostering an inclusive culture that values diversity in our people, reflecting the communities we serve and our customer base. We strive to attract and retain a diverse talent pool and create an environment where everyone is empowered to be their authentic selves at work.
Seniority Level Mid‑Senior level
Employment Type Full‑time
Job Function Information Technology
Industries Software Development
Referrals increase your chances of interviewing at SIXGEN by 2x.
#J-18808-Ljbffr
Senior Cyber Operator
role at
SIXGEN .
Get AI‑powered advice on this job and more exclusive features.
Position:
Senior Cyber Operator
Job Type:
Full Time
Location:
Remote US. Proximity to Maryland or Virginia is a plus, but not required
Clearance Requirements:
No clearance required, but must be eligible for PT and secret clearances
Travel:
Up to 50%
About the Team SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. You'll work with our highly skilled operators conducting research and assessments based on real‑world threats. You'll simulate adversaries and malicious actors and report details and actionable findings on critical assets and infrastructures. Using innovative processes, tools, and techniques, you'll predict and overcome cybersecurity vulnerabilities. Your successes will be supported by our diverse team of experienced, technical talent.
What You'll Do
Provide recommendations for technical oversight of activities aligned to command priorities.
Perform internal and external pentest against systems to determine vulnerabilities and offer mitigation strategies.
Perform phishing assessments.
Perform vulnerability risk assessment.
Participate in the testing phase of security controls assessments using specialized knowledge of network protocols, operating systems, architectures, equipment, services, and standards.
Conduct comprehensive, black‑box penetration testing of web applications to identify critical vulnerabilities such as SQL injection, XSS, CSRF, XXE, deserialization attacks, RCE, etc. Utilize a bug bounty–style approach to independently enumerate and assess targets, simulating real‑world attack scenarios.
Analyze application architecture and source code (when available) to uncover deeper, logic‑based or systemic vulnerabilities.
Document and communicate findings with clear risk assessments, reproduction steps, and actionable remediation recommendations.
Stay up to date with evolving web technologies, threat trends, and security tools to ensure cutting‑edge testing practices.
Required Qualifications
2 years leadership experience directly leading a team.
Minimum 2 years of independently conducting every phase of a red team exercise on their own without guidance or supervision.
Minimum 2 years mentoring junior and mid‑level operators on red team tradecraft and Advanced Knowledge Requirements (that they possess).
Minimum 2 years of hands‑on experience in network mapping, vulnerability scanning, and penetration and web application testing using software frameworks (including but not limited to: Cobalt Strike, Kali, BurpSuite, etc.) to meet operational requirements.
Strong communication skills for interfacing with clients and documenting findings.
Demonstrated experience working both collaboratively and independently with minimal supervision.
Script writing and crafting of payloads that bypass A/V and EDR solutions for use in various phases of a red team exercise.
In‑depth experience pen testing on internal and external networks.
Minimum 5 years of hands‑on web application penetration testing experience, with a strong preference for OSCP or equivalent hands‑on certifications such as CBBH, CWEE, OSWA, OSWE, GWAPT.
Experience developing actionable intelligence based on open source intelligence (OSINT) gathering.
Experience building offensive capabilities or tools to enhance operations with programming languages such as, but not limited to, Python, Bash, Terraform, Ansible, etc.
Experience testing web‑based APIs (e.g., REST, SOAP, XML, JSON).
Advanced knowledge of manual testing techniques and automated tools (e.g., Burp Suite, OWASP ZAP) to assess application security.
Familiarity with FISMA and NIST 800‑series frameworks; experienced in applying formal testing protocols and methodologies to assess networks, web apps, and cloud environments.
CRTO certification required (or ability to obtain within 90 days of start date).
OSCP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required.
Willing and able to travel as needed. Up to 50% during periods of high workload.
US Salary Range $120,000 – $150,000 USD
Benefits
Employer‑paid health insurance premiums (medical, dental, vision) for you and your family.
Employer‑paid short/long term disability insurance and basic life/AD&D insurance.
401K with a 4% employer contribution.
Professional development reimbursement options available (training, certification, education, etc.).
Flexible and remote work policies for most positions.
Flexible PTO and holiday schedule.
SIXGEN is an Equal Opportunity Employer. We ensure that all applicants are considered for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, age, marital status, ancestry, projected veteran status, or any other protected group or class.
We are committed to fostering an inclusive culture that values diversity in our people, reflecting the communities we serve and our customer base. We strive to attract and retain a diverse talent pool and create an environment where everyone is empowered to be their authentic selves at work.
Seniority Level Mid‑Senior level
Employment Type Full‑time
Job Function Information Technology
Industries Software Development
Referrals increase your chances of interviewing at SIXGEN by 2x.
#J-18808-Ljbffr