Red Team Penetration Tester

What you'll do

• Develop detailed test and assessment plans for onsite and remote security assessments.
• Execute attack stages including footprinting, scanning, enumeration, gaining access, and privilege escalation.
• Identify system inconsistencies by comparing vulnerability scans and configuration data against RMF artifacts and design specifications.
• Perform packet-level analysis using Wireshark and tcp dump to identify anomalous or malicious network traffic.
• Conduct penetration tests on networks, applications, servers, endpoints, wireless, and mobile technologies using automated tools.
• Perform physical security testing to circumvent locks, badge readers, and other physical security controls.
• Debug and reverse engineer software to identify vulnerabilities and develop exploits.

What we're looking for

• 5+ years of experience in software engineering applied to program development and modeling and simulation for DoD or IT systems.
• Experience with Penetration Testing, Red Team Operations, tool/software development, exploits, malware, C2, reverse engineering, and bug bounties.
• Proficiency in programming and database languages including PHP, ASP, SQL, Java, HTML, or No SQL.
• Knowledge of Linux and Windows based systems.
• Knowledge of penetration testing tools such as Kali, Metasploit, NMAP, and Cobalt Strike.
• Ability to debug and reverse engineer software.
• Top Secret clearance.
• HS diploma or GED.
• IAT Level II per DoD 8570.01 or successor Certification.
• Ability to obtain specific certifications (OSCP, OSCE, OSEE, OSWP, SANS, SEC560, SEC542, SEC660, SEC642, or SEC564) within 3 months of hire.