Penetration Tester (Red Team) - Military veterans preferred

This position operates with minimal government lead supervision supporting the Department of Defense (Navy). Our company also does commercial work outside of the DoD which occasional pull teams members based on interest and skillsets:

• Experience in participating in multi week red team security assessments or continuous operations

• Design and execute complex adversary simulations using cloud infrastructure, redirectors, and social engineering techniques. Identify and deploy attack vectors, including phishing campaigns and multi-stage attacks, leveraging cloud-based resources and redirectors to emulate real-world threat actors and evaluate the organization's defense mechanisms and/or capture security metrics

• Performs vulnerability analysis and exploitation of applications, operating systems or networks with a focus in building attack chains that have direct business impact

• Conduct in-depth analysis to identify and evaluate vulnerabilities and weaknesses within company systems

• Devises tests and scenarios for various penetration tests and Red Team activities. These will be tailored to whichever client is being supported on engagements and focus on most likely adversary TTPs, crown jewels, and potential security gaps in the client’s defense

• Documents results and communicates them to engineers and management

• Provides recommendations for new technologies and system designs according to test results

• Develops automated testing programs where possible

• Utilizes Red and Purple team assessment methodologies and adds to the methodologies as appropriate

• This position could require significant travel to client sites

Requirements