ZipRecruiter

Log In

2

Entry Level Red Team Cyber Security Jobs in Virginia

Beyond SOF

Red Cyber Operator (new)

Fort Belvoir, VA · On-site

Cyber Red Team assessments * Penetration Testing * Antivirus evasion, EDR evasion, offensive infrastructure, phishing and social engineering * Offensive cyber operations What Required Skills You'll ...

Beyond SOF

Red Cyber Operator (new)

Fort Belvoir, VA · On-site

Cyber Red Team assessments * Penetration Testing * Antivirus evasion, EDR evasion, offensive infrastructure, phishing and social engineering * Offensive cyber operations What Required Skills You'll ...

CACI International Inc

Penetration Tester

Chantilly, VA · On-site

The role involves working in a cybersecurity red team environment and contributing to national security efforts while being part of a collaborative and engaging team culture. Responsibilities : • ...

next page

Showing results 1-20

All JobsRed Team Cyber Security JobsEntry Level Red Team Cyber Security JobsEntry Level Red Team Cyber Security Jobs in Virginia

Entry Level Red Team Cyber Security information

What is an entry level red team cyber security specialist?

Entry level red team cyber security jobs involve working as part of a team that simulates cyber attacks against organizations to identify vulnerabilities and test defenses. These roles typically focus on penetration testing, social engineering, and assessing the security of networks, applications, and systems. Entry-level positions may include tasks such as conducting vulnerability scans, performing basic exploits, documenting findings, and assisting senior team members in preparing reports. The goal is to help organizations improve their security by thinking like an attacker and proactively finding weaknesses before malicious actors do.

What does an entry level red team cyber security specialist do?

As an Entry Level Red Team Cyber Security professional, your daily tasks often include conducting vulnerability assessments, simulating cyberattacks to test organizational defenses, and documenting findings for senior team members. You'll collaborate closely with Blue Team counterparts to help improve security posture and may participate in team debriefs or planning sessions. Regular responsibilities also involve researching new threat vectors, assisting with penetration testing, and learning toolsets commonly used in ethical hacking. This hands-on environment is fast-paced and encourages continuous learning and skill development.

What skills and qualifications are needed to thrive as an entry level red team cyber security specialist?

To thrive as an Entry Level Red Team Cyber Security Specialist, you need a solid understanding of networking, operating systems, penetration testing methodologies, and a degree in computer science or a related field. Familiarity with tools like Metasploit, Nmap, and Burp Suite, as well as certifications such as CompTIA Security+ or OSCP, is typically required. Strong problem-solving skills, curiosity, and effective communication are crucial soft skills for this role. These competencies are essential to identify vulnerabilities, simulate real-world attacks, and effectively report findings to enhance organizational security.

What is the difference between Entry Level Red Team Cyber Security vs Penetration Tester?

AspectEntry Level Red Team Cyber SecurityPenetration Tester
CertificationsCompTIA Security+, CEH (entry-level)CEH, OSCP (entry-level)
Work EnvironmentSimulated attack scenarios, team collaborationConducting controlled security assessments
Industry UsageUsed in cybersecurity teams for offensive securityCommonly hired for vulnerability assessments

Entry Level Red Team Cyber Security and Penetration Tester roles both focus on identifying security weaknesses. While penetration testers typically perform specific security assessments, red team members engage in broader simulated attacks to test organizational defenses. Both roles require similar certifications and work environments, making them closely related but with different scopes of engagement.

What are the most commonly searched types of Red Team Cyber Security jobs in Virginia?

The most popular types of Red Team Cyber Security jobs in Virginia are:

What are popular job titles related to Entry Level Red Team Cyber Security jobs in Virginia?

For Entry Level Red Team Cyber Security jobs in Virginia, the most frequently searched job titles are:

What job categories do people searching Entry Level Red Team Cyber Security jobs in Virginia look for?

The top searched job categories for Entry Level Red Team Cyber Security jobs in Virginia are:

What cities in Virginia are hiring for Entry Level Red Team Cyber Security jobs?

Cities in Virginia with the most Entry Level Red Team Cyber Security job openings:

Entry Level Red Team Cyber Security jobs near you
Infographic showing various Entry Level Red Team Cyber Security job openings in Virginia as of August 2026, with employment types broken down into 1% As Needed, 78% Full Time, 19% Part Time, and 2% Contract. Highlights an 91% Physical, 2% Hybrid, and 7% Remote job distribution.

Security Engineer III, Red Team Operator (TS Clearance)

Deloitte

Rosslyn, VA • On-site

Full-time

Re-posted 13 days ago

Deloitte rating

8.2

Company rating: 8.2 out of 10

Based on 93 frontline employees who took The Breakroom Quiz

46th of 152 rated financial services

Job description

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

We are seeking a skilled Red Team Operator to simulate real-world adversary tactics, techniques, and procedures to assess and improve the organization's detection, response, and resilience capabilities. This role is responsible for planning and executing adversary emulation, penetration testing, social engineering, and post-exploitation activities in a controlled and authorized manner. The ideal candidate combines deep offensive security expertise with strong operational discipline and clear reporting skills.

Work you'll do

As a Red Team Operator on the Cyber Defense & Resilience team, you will be responsible for...

  • Plan and execute red team operations against enterprise environments, web applications, cloud platforms, and endpoints.
  • Emulate advanced threat actors using realistic attack paths, tools, and techniques.
  • Conduct reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration simulations.
  • Assess the effectiveness of security controls, monitoring, and incident response processes.
  • Perform phishing, social engineering, and credential attack exercises where authorized.
  • Develop custom payloads, scripts, and attack workflows to support engagements.
  • Document findings, attack chains, gaps in defenses, and recommendations for remediation.
  • Deliver clear after-action reports and debriefs to technical and leadership stakeholders.
  • Collaborate with blue teams, detection engineers, and security leadership to improve defensive capabilities.
  • Maintain strict adherence to rules of engagement, legal requirements, and operational safety.

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to provide clear guidance to others

The team

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence. Helps manage and protect dynamic attack surfaces and provides rapid crisis and cyber incident response, ensuring clients can be ready for, respond to, and recover from business disruptions.

Qualifications

Required:

  • Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
  • Active Top-Secret Clearance
  • Ability to work onsite up to 5 days a week.
  • 2+ years of experience within the following:
    • Knowledge of network architecture, protocols, and techniques (e.g., tunneling)
    • Hands-on offensive security experience in red teaming, purple teaming, or adversary simulation.
    • Strong knowledge of enterprise attack techniques across Windows, Active Directory, Linux, cloud, and identity environments.
    • Experience with command and control frameworks, privilege escalation, lateral movement, and evasion techniques.
    • Proficiency with tools such as Cobalt Strike, Mythic, Metasploit, BloodHound, Burp Suite, Nmap, and PowerShell or Python.
    • Experience with MITRE ATT&CK mapping and threat emulation.
    • Ability to write high-quality reports that connect technical findings to business risk.
  • Certified Red Team Operator (CRTO) or Offensive Security Certified Professional (OSCP).
  • Ability to travel 20%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Preferred:

  • Experience with C2 Frameworks such as Cobalt Strike, Havoc, Mythic, Sliver
  • Experience with cloud red teaming in AWS, Azure, or GCP.
  • Familiarity with detection engineering, SIEM, EDR, and purple team exercises.
  • Experience developing custom tooling or modifying public offensive tools.
  • Knowledge of malware analysis, reverse engineering, or exploit development.

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $110,700- $218,300.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Qualifications:

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

We are seeking a skilled Red Team Operator to simulate real-world adversary tactics, techniques, and procedures to assess and improve the organization's detection, response, and resilience capabilities. This role is responsible for planning and executing adversary emulation, penetration testing, social engineering, and post-exploitation activities in a controlled and authorized manner. The ideal candidate combines deep offensive security expertise with strong operational discipline and clear reporting skills.

Work you'll do

As a Red Team Operator on the Cyber Defense & Resilience team, you will be responsible for...

  • Plan and execute red team operations against enterprise environments, web applications, cloud platforms, and endpoints.
  • Emulate advanced threat actors using realistic attack paths, tools, and techniques.
  • Conduct reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration simulations.
  • Assess the effectiveness of security controls, monitoring, and incident response processes.
  • Perform phishing, social engineering, and credential attack exercises where authorized.
  • Develop custom payloads, scripts, and attack workflows to support engagements.
  • Document findings, attack chains, gaps in defenses, and recommendations for remediation.
  • Deliver clear after-action reports and debriefs to technical and leadership stakeholders.
  • Collaborate with blue teams, detection engineers, and security leadership to improve defensive capabilities.
  • Maintain strict adherence to rules of engagement, legal requirements, and operational safety.

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to provide clear guidance to others

The team

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence. Helps manage and protect dynamic attack surfaces and provides rapid crisis and cyber incident response, ensuring clients can be ready for, respond to, and recover from business disruptions.

Qualifications

Required:

  • Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
  • Active Top-Secret Clearance
  • Ability to work onsite up to 5 days a week.
  • 2+ years of experience within the following:
    • Knowledge of network architecture, protocols, and techniques (e.g., tunneling)
    • Hands-on offensive security experience in red teaming, purple teaming, or adversary simulation.
    • Strong knowledge of enterprise attack techniques across Windows, Active Directory, Linux, cloud, and identity environments.
    • Experience with command and control frameworks, privilege escalation, lateral movement, and evasion techniques.
    • Proficiency with tools such as Cobalt Strike, Mythic, Metasploit, BloodHound, Burp Suite, Nmap, and PowerShell or Python.
    • Experience with MITRE ATT&CK mapping and threat emulation.
    • Ability to write high-quality reports that connect technical findings to business risk.
  • Certified Red Team Operator (CRTO) or Offensive Security Certified Professional (OSCP).
  • Ability to travel 20%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Preferred:

  • Experience with C2 Frameworks such as Cobalt Strike, Havoc, Mythic, Sliver
  • Experience with cloud red teaming in AWS, Azure, or GCP.
  • Familiarity with detection engineering, SIEM, EDR, and purple team exercises.
  • Experience developing custom tooling or modifying public offensive tools.
  • Knowledge of malware analysis, reverse engineering, or exploit development.

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $110,700- $218,300.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Education:Bachelor's DegreeEmployment Type:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply