Red Teamer

Please make sure your application is complete, including your education, employment history, and any other applicable sections. Initial screening is based on the minimum requirements as defined in the job posting, such as education, experience, licenses, and certifications. Your experience should also address the knowledge, skills and abilities needed for the role. Incomplete applications will not be considered.

*This position is located Remote, Anywhere US *

*Due to being a federal contractor, you may be subject to obtaining and maintaining a public trust security clearance from the federal government. *

Position Purpose:

Conducts offensive security engineering to evaluate and strengthen the organization’s security posture through penetration testing, red‑team exercises, purple‑team activities, and advanced vulnerability analysis across infrastructure, applications, and cloud environments.

Essential Responsibilities:

• Builds and runs purple team exercises to improve SOC capability, detection engineering, and threat hunting maturity.
• Executes internal and external penetration tests, including network, web application, wireless, and cloud.
• Generates detailed technical reports and executive summaries outlining findings, risk impacts, and remediation recommendations.
• Develops and maintains attack tooling, scripts, payloads, and custom testing methodologies.
• Conducts full scope, stealth red team exercises emulating real-world threat actors.
• Assists with zero-day research, exploit validation, and attacker behavior modeling.

Minimum Qualifications

Education

• Bachelor's degree from an accredited college or university

•

• Additional experience in an information security role may be substituted for Bachelor’s degree on a year per year basis. (Experience requirements may be satisfied by full-time experience or the prorated part-time equivalent.)

Certification

• Have or obtain a standard industry certification for offensive security role, such as OSCP, OSWE, OSEP, GX‑PN, GWAPT, GPEN, CRTO, OSEE, OSMR, CEH (baseline), Pentest+, within 1 year of employment or promotion

Experience

• Three (3) years in an Information Security role
• Two (2) years hands‑on penetration testing or offensive security experience
• Experience in at least two of the following offensive domains: network, application, cloud, mobile, or social engineering
• Demonstrated experience in attack simulation, exploit development, or red team operations
• Familiarity with SIEM, EDR, and security monitoring platforms from an attacker‑evasion perspective

Benefits

TMF offers an excellent benefits package, including:

• Medical, dental, vision, life, accidental death and dismemberment, and short and long-term disability insurance
• Section 125 plan
• 401K
• Competitive salary
• License/credentials reimbursement
• Tuition Reimbursement

EOE Vet/Disability