{"id":2938288,"url":"https://alion.io/job/amentum-red-team-cyber-analyst","title":"Red Team Cyber Analyst","company":{"id":14861,"name":"Amentum","domain":"amentum.com","url":"https://alion.io/company/amentum","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Fort Belvoir, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":99000,"max_usd":225000,"period":"year","method":"role_country_seniority_unknown","sample_n":3385},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Metasploit","optional":false},{"name":"Nessus","optional":false},{"name":"Red Teaming","optional":false},{"name":"Wireshark","optional":false},{"name":"DNS","optional":true},{"name":"Linux","optional":true},{"name":"TCP/IP","optional":true},{"name":"Unix","optional":true},{"name":"VMWare","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-10-16T00:00:00Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-23T20:49:52Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Red Team Cyber Analyst\nRed Team Cyber Analysts (RCA) are responsible for providing direct strategic and tactical analytic support to the DoD Red Team. RCAs drive the strategic direction of cyber operations by selecting cyber targets and identifying cyber enabling actions from an adversary perspective. RCAs are responsible for the management, communication, and presentation of information gathered to team members, partner organizations, customers, and external parties. RCAs must exhibit initiative, creativity, an ability to operate in an analytically flat organization, and operate within a culture of professionalism and respect with peers, operational teams, and customers.\nRCAs are responsible for providing advisory support concerning computer (network and infrastructure) analysis to enable Adversarial Cyber and/or Electronic Warfare Operations to support an evolving DoD Red Team. Additionally, RCAs act as subject matter experts on variety of complex topics related to varied cyber threats. As required, RCAs travel domestically and abroad to provide their expertise in direct support of geographically disparate vulnerability assessments.\nSpecifically, RCAs are responsible for researching and identifying positions, access points, relationships, organizations, and other potential vulnerabilities in support of DoD Red Team operations. This includes identifying adversarial cyber information for program objectives, identifying gaps in cyber architecture, and developing cyber courses of action on vulnerability assessments. Further, RCAs provide advice to tactical partner elements and Red Team personnel in planning adversarial cyber assessments. RCAs are also responsible for implementing specialized training, advanced analytic skills and tools, and maintaining knowledge of industry practices related to Cyber Red Teaming. Red Team Cyber Analysts report directly to the Red Team Cyber Analysis Lead.\nCandidates applying for this position must display strong analytical skills, a DoD IAT Level II certification, and the conceptual knowledge of specific cyber related programs and software (example: Metasploit, Nessus, Wireshark).\nRCAs are not authorized to conduct cyber or ground operations. Rather, RCAs provide the analytic support to enable the conduct of operations.\nResponsibilities/Tasks\nThe Red Team Cyber Analyst shall:\nCharacterize the adversary’s cyber capabilities. Research the structure, ideology, intentions, tactics, and capabilities of adversarial cyber organizations to develop threat characterization using a combination of both classified and unclassified sources. \nContribute constructively to cyber threat emulation. Identify information requirements, develop assessment cyber strategies and assist Red Team Program Leader collection plans, identify information sources, and develop and conduct research of publicly available information (PAI) in order to determine adversary cyber courses of action and relevant information requirements (IR).\nIdentify, map, and plan potential exploitation for key telecommunications networks. \nAnalyze and characterize cyber systems and conduct analysis appropriate to the program, identify essential functions/tasks and critical assets necessary to perform them as determined by the program leader.\nContribute to developing cyber adversary courses of action (CoA). Develop courses of action that a cyber adversary might employ against customer personnel, equipment, facilities, networks, information and information systems, infrastructure, and supply chains. Identify critical nodes/links or other targets and the effects of other environmental characteristics on course of action development.\nFacilitate timely information management flow from DoD Red Team partner elements and other entities supporting DoD Red Team operations.\nSupport field assessments from a cyber adversary perspective.\nSynthesize findings to support vulnerability identification, course of action development, protection studies, trend analyses, risk analysis, and mitigation strategies.\nDevelop a comprehensive understanding of the cyber implications of vulnerabilities discovered and fuse those findings with the systems analysis and determine impacts to the national and military missions they support.\nPrepare activity reports including out briefs, senior leader briefs, and interim progress reports (IPRs) and briefs, white papers, after action reviews, final reports, risk analysis products, and other documents necessary to convey assessment findings to customers, partners, and other stakeholders.\nBe able to explain network/system mechanisms to analysts and ground element in order to facilitate better analysis and operations.\nShould have a diverse understanding of network and information security operations, network exploitation, and telecommunications.\nPerform regular updates of existing documents based on changes in the Threat Landscape or upon discovery of new threat tactics or procedures.\nRequired Skills/Qualifications\nDOD Level II IAT Certification or higher Certification demonstrating certified knowledge of Information Security Principles as it relates to administration of DoD networks and the cyber domain.\nAbility to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and visual means.\nAbility to accurately and completely source all data used in products.\nAbility to clearly articulate information requirements into well-formulated research questions.\nAbility to develop or recommend analytic approaches or solutions to problems and situations for which information is incomplete or for which no precedent exists.\nAbility to evaluate, analyze, and synthesize large quantities of data (which may be fragmented and contradictory) into high quality products.\nAbility to focus research efforts to meet the customers decision-making needs.\nAbility to function effectively in a dynamic, fast-paced environment.\nAbility to function in a collaborative environment, seeking continuous consultation with other analysts and experts both internal and external to the organization to leverage analytical and technical expertise.\nAbility to identify information gaps.\nAbility to recognize and mitigate cognitive biases which may affect analysis.\nAbility to think critically.\nAbility to think like and emulate actions of threat actors.\nAn understanding of both the physical and digital aspects of communications systems.\nProficient in understanding, analyzing, and summarizing comprehensive and complex technical, contractual, and research information/data.\nDemonstrated expertise performing information/data collection, analysis, and fusion.\nPossess a current driver’s license.\nCapable of operating a rental vehicle.\nActive TS/SCI Clearance.\nDesired Skills/Qualifications\nKnowledge of common computer/network infections (virus, Trojan, etc.) and methods of infection (ports, attachments, etc.).\nKnowledge of computer networking fundamentals (i.e., basic computer components of a network, types of networks, etc.).\nKnowledge of concepts, terminology, and operations of a wide range of communications media (computer and telephone networks, satellite, fiber, wireless).\nKnowledge of cyber operations terminology/lexicon.\nKnowledge of data communications terminology (e.g., networking protocols, Ethernet, IP, encryption, optical devices, removable media).\nKnowledge of how to extract, analyze, and use metadata.\nKnowledge of intelligence disciplines.\nKnowledge of intelligence preparation of the environment and similar processes.\nKnowledge of intelligence support to planning, execution, and assessment.\nKnowledge of internal tactics to anticipate and/or emulate threat capabilities and actions.\nKnowledge of Internet network addressing (IP addresses, classless inter-domain routing, TCP/UDP port numbering).\nKnowledge of malware.\nKnowledge of operations security.\nKnowledge of organizational hierarchy and cyber decision-making processes.\nKnowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc.\nKnowledge of telecommunications fundamentals.\nKnowledge of the basic structure, architecture, and design of modern communication networks.\nKnowledge of the basics of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).\nKnowledge of the common networking and routing protocols (e.g. TCP/IP), services (e.g., web, mail, DNS), and how they interact to provide network communications.\nKnowledge of the ways in which targets or threats use the Internet.\nKnowledge of threat and/or target systems.\nKnowledge of virtualization products (VMware, Virtual PC).\nKnowledge of what constitutes a threat to a network.\nUnderstand and be well versed in common cyber threat terminology, vulnerability and penetration test principles and methodologies; possess basic knowledge of cyber incident and response forensics and related current events.\nFamiliarity with Log Analysis, Packet Analysis OSI Model, Network Architectures, NIST, DIA-CAP, RMF, and Information Operations, threat intelligence activities including the collection of and tracking threat actors, digital forensics incident response; and threat hunting methodologies.\nExperience performing attack analysis or Red Team penetration testing against operational computer networks including experience in Windows Security, Network Security, Linux/Unix Security, Database security, or Mainframe Security.\nAmentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, religion, color, sex, gender, national origin, age, United States military veteran’s status, ancestry, sexual orientation, marital status, family structure, medical condition including genetic characteristics or information, veteran status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law.\nLabor Law Posters\nEEO including Disability/Protected Veterans\nCompensation Details:\n100,000 - 130,000The compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.\nBenefits Overview:\nOur health and welfare benefits are designed to support you and your priorities. Offerings include:\nHealth, dental, and vision insurance\n\nPaid time off and holidays\n\nRetirement benefits (including 401(k) matching)\n\nEducational reimbursement\n\nParental leave\n\nEmployee stock purchase plan\n\nTax-saving options\n\nDisability and life insurance\n\nPet insurance\n\nNote: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.\nOriginal Posting:\n10/16/2026 - Until FilledAmentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.\nAmentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disabilit...","description_format":"text","description_chars":12271,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Equity","Life insurance","Parental leave","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Military Logistics","Business Process Outsourcing (BPO)","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-20T16:37:47Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":122500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":36,"band":"fade","label":"Fading","p_open":1,"p_active":0.658,"p_room":0.55,"age_days":7,"expected_fill_days":7,"reasons":["conf:0","velocity","win:tail","comp:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/amentum-red-team-cyber-analyst","json_url":"https://alion.io/job/amentum-red-team-cyber-analyst.json","meta":{"generated_at":"2026-10-24T00:57:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1535,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":14861},"rest":"https://alion.io/mcp/rest/get_company?id=14861"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famentum-red-team-cyber-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famentum-red-team-cyber-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famentum-red-team-cyber-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amentum-red-team-cyber-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famentum-red-team-cyber-analyst"}]}