Millennium Corporation is hiring a Red Team Penetration Tester to work in North Charleston. The candidate must have an active Secret clearance.
The ideal candidate will:
- Provide support by utilizing experience in automation using Powershell, PowerAutomate, Logic Apps, Graph API.
- Provide support by utilizing experience conducting Red Team operations in an MDE environment.
- Provide support by utilizing experience with AWS, Cloud Audit, Serverless and Microservice Architecture.
- Provide support utilizing experience working with AWS services (such as EC2, S3, KMS, RDS) and security best practices relevant to those services.
- Provide support by performing web application and API penetration testing, and Cloud Security Audits.
- Provide support by utilizing experience with Web Services penetration testing (RESTful and SOAP) Web Authentication protocols (e.g. OAuth2, SAML, LDAP).
- Mimic attacks of threat actors defined by the Cyber Threat Intelligence (CTI) Team to assess and improve IT system resilience, SOC monitoring effectiveness, and tuning of security tools
- Perform ad hoc, focused pen tests to validate the effectiveness of corrective actions taken to address identified weaknesses
- Perform Penetration Testing Services for any internal or public websites and associated systems
Qualifications:
- Candidate must have an active Secret security clearance.
- With an accredited bachelor's degree within a relevant area the candidate must have a minimum of 6 years of experience. With a masters degree, a minimum of 3 years of experience.
- Must have a CFR, Cloud+, CySA+, GCED, GICSP or PenTest+ certification.
- Must also be able to obtain a Offensive Security Certified Professional (OSCP), Offensive Security Certified Expert (OSCE), Offensive Security Exploitation Expert (OSEE) or Offensive Security Wireless Professional (OSWP) certification within 6 months of employment.
- Demonstrated experience performing vulnerability assessments with the Assured Compliance Assessment Solution (ACAS) tool.
- Demonstrated experience utilizing penetration tools and mimicking threat behavior.
- Demonstrated experience with performing STIG assessments to include using SCAP benchmarks.
- Shall have demonstrated experience utilizing packet analyzer tools such as Wireshark and tcpdump.
