Our team is currently trying to fill a Red Team Operator position that supports the NAVWAR Red Team in Charleston, SC. We are looking for someone that has seasoned experience identifying and exploiting computer software and hardware vulnerabilities. The focus areas for this role are one or more of the following: network security testing, web application testing, vulnerability research, reverse engineering, code review, and social engineering. This is not a remote position.

Role Responsibilities

* Conduct assessments using off-the-shelf or self-developed exploitation tools and document findings for customer remediation

* Maintain working knowledge of advanced cyber threat actor tactics, techniques and procedures (TTP), and emulate these TTPs to identify vulnerabilities and risk

* Perform proactive research to identify and understand new threats, vulnerabilities, and exploits

* Produce and deliver vulnerability and exploit information to clients in the form of briefings and reports

* Mentor and train fellow team members in new technologies and techniques

* Document and present on new testing methodologies to internal and external teams

* Excel as both a self-directed individual and as a member of a larger team

* Availability for domestic travel and limited international travel up to 25%

Requirements

* Experience with security tools such as – Nmap, Cobalt Strike, Metasploit, Kali Linux, Burp Suite Pro, etc., as well as other various commercial and self-developed testing tools

* 3 years of experience penetration testing, application testing, and red team engagements

* Experience with scripting languages such as python, ruby, powershell, VBScript, POSIX shell, as well as familiarity with programming languages such as: C/C++/C#/Rust/Go,Java,PHP

* Understanding of: network protocols (e.g., HTTP, HTTPS, SMTP, FTP, SSH); Web technologies (e.g., HTML, JavaScript, XML, AJAX, JSON, and REST)

* Strong technical communication skills, both written and verbal

* Ability to explain technical security concepts to executive stakeholders in business language

* Must be able to obtain a government security clearance

Preferences

* Undergraduate degree in Computer Science or Engineering and 5+ years relevant experience

* Operating systems administration and internals (Microsoft Windows / Linux)

* Understanding of TCP/IP networking at a technical level

* Significant plusses for one or more of the following: experience in experience with disassembly and debugging tools, exploit development, runtime malware analysis, testing embedded platforms and hardware security, and cryptography or cryptanalysis

* Public security presentation experience is a plus

* Security certifications that meet DoD 8570 requirements for a CND Auditor. i.e. CEH, Security+. Other recognized certs OSCP, OSCE, OSEE, OSWE

* Active Secret U.S. government security clearance

Securifera jobs

Red Team Operator / Penetration Tester